last executing test programs: 13m15.041181791s ago: executing program 4 (id=1170): syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={0x4c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x5, 0x1, 0x8, 0x7ff, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x1}]}]}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r4, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000001380)="7201cc576a0c42dc9734b695f6b360bbe06853a4f0703787e506b7a171e18f1a6f2d920a2e56d90e4f", 0x29}], 0x1) 13m14.155166201s ago: executing program 4 (id=1177): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x800, &(0x7f0000000180)={0x2e, 0x1, 0x3}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 13m13.26644508s ago: executing program 4 (id=1183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 13m13.201423197s ago: executing program 4 (id=1184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1172402, &(0x7f00000007c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10001}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffffffff7ffb}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}]}}, 0x1, 0x0, &(0x7f0000000440)="4006000000000000008477ad7452efd7ee0109515ff65b88e6efb9b3b3669e040ee6b1e0979308f9719b85255ba41812f3e356204beb372972cf8e353133cf1497f98520d1dac70c4e008614ee035659452e1adb73f6afa57cd306a36804f58030fded685ae8e778473ed108f569ee966fa91ddae5c572495c338189493cc767a7faed0404ee8a392728ab8d8244c39c013adcc15d144918486f212e0d112d753200") symlinkat(&(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000500)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) socket(0x840000000002, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x672742, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r8, 0x100917) accept4(r8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000090601020000000000000000c800ffff180064c2f980976694f39dcb72fd07800c00018008000140ac1e010108000a40000000020900020073797a31000000000500010007000000967c45cde2e026506418bc75b955a666e872c1b801cf6dfbf8b7ceaa3a4fcc94a46f37ad00bd5cdc5f74585d9f6e9aafa5cd423adaf6a499f49d513eb94b27fd290f2eeaeae92d9dfb1bcda976d469171e552a5138b08eccbff8b2b759ee706fec74ee98b136d9896a8c5c4d8b6989bc99e32921927f9126e6ba9b920e6b945b36c2c351169d6614cd84b6f364753e4e75fc3219385ff191dfeafa3b60a6768554167494b6ac5aa280ea00"/257], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$sock_int(r1, 0x1, 0x45, &(0x7f0000000140)=0x8000000, 0x4) 13m12.20933609s ago: executing program 4 (id=1190): prctl$PR_SET_FP_MODE(0x2d, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a00"], 0x0) r0 = msgget$private(0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) r2 = socket(0x10, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0xc00) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r5, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) futex(&(0x7f00000040c0), 0xd, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x2800) 13m11.905739093s ago: executing program 4 (id=1193): ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000005c0)={0x0, @reserved}) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) syz_open_dev$loop(0x0, 0x2, 0x2001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0xffffffffffffffaa) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x101) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0x77ffffff, 0x1, 0xc, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0xbb, 0x3, 0x9, 0x9, 0xd}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x4622, 0x8, @loopback}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r4], 0x190) close(r7) socket$nl_generic(0x10, 0x3, 0x10) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x520, 0xffffffff, 0xe4, 0x38c, 0x0, 0xfeffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x268, 0x2a8, 0x0, {}, [@common=@srh1={{0x8c}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x57c) 13m11.587540061s ago: executing program 32 (id=1193): ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000005c0)={0x0, @reserved}) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) syz_open_dev$loop(0x0, 0x2, 0x2001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0xffffffffffffffaa) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x101) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0x77ffffff, 0x1, 0xc, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0xbb, 0x3, 0x9, 0x9, 0xd}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x4622, 0x8, @loopback}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r4], 0x190) close(r7) socket$nl_generic(0x10, 0x3, 0x10) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x520, 0xffffffff, 0xe4, 0x38c, 0x0, 0xfeffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x268, 0x2a8, 0x0, {}, [@common=@srh1={{0x8c}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x57c) 13m7.994202273s ago: executing program 2 (id=1203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "31fc0c8b"}]}], {0x14}}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x1, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2455}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x50000000}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_usb_connect(0x1, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x40, 0x55, 0x69, 0x8, 0xeb1a, 0xe357, 0x7b81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xff, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x64, 0x19, 0x0, 0xd2, 0x92, 0x84, 0x7}}, {{0x9, 0x4, 0x64, 0x8, 0x0, 0x8c, 0xc0, 0xa4, 0x1}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000280)={0x1, [0x0, 0xff7f, 0x1, 0x0, 0x8c2, 0x6, 0x2000, 0x5, 0x2, 0x4, 0x7, 0x8, 0x86, 0x1, 0xfffe, 0x31e, 0x86, 0x9, 0x8, 0xe, 0x4, 0x1000, 0xffb, 0x0, 0x4, 0x4ef, 0x6, 0xfff7, 0x4, 0x108, 0x0, 0x4, 0x7, 0xce53, 0x7, 0x0, 0x7ff, 0xd, 0xc, 0x9, 0x4f3, 0xe72, 0x6, 0x81, 0x4, 0xffe, 0x4, 0x8], 0x4}) syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x63, 0x20, 0x54, 0x10, 0x2a39, 0x3fa0, 0xf2d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xf7, 0x0, 0xff, 0x3b, 0x32, 0x97}}]}}]}}, 0x0) 13m6.031899154s ago: executing program 2 (id=1210): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0x100000b) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) syz_usb_control_io$uac2(r1, &(0x7f00000004c0)={0xc, &(0x7f00000003c0)={0x40, 0x23, 0x3f, {0x3f, 0x8, "87e72cbef91f961907fd822d6f7d40db65e25ab8f8980f627e1f82084f18a5e4592aa07862ab1f37bc594197dc420a378c377f304e0da995d58a269b29"}}, &(0x7f0000000b80)={0x0, 0x3, 0xd0, @string={0xd0, 0x3, "0575dfe00752fbcfa00de0b0669f9ce2363c13df522df3a6868239943480012d36feb7396bfaf2d8b0da16d32d3028b3b7e6474c6c8056ca0647a21fd17d36664d8f481c5b5d96c7d203bd5a5c6bb1f955e18900e6b66afb84ddeacad5c11ef0e0571495185c52a47adf8cc34dbee4f66f605bd09799583922a40d69658c292363b437eae1fb699bed6febb6631a272c5883b0939870af1f5b93d9e97499bb2e9b0b6ddb058ecbc7f0c7115709ee1469101d83a6e0133bdf47b9e69055cfb28bbeed58140fa109f5633e423f226e"}}}, &(0x7f0000000b00)={0x24, &(0x7f0000000880)={0xb1003fd7edc40454, 0x18, 0x8b, "542289d2cd72f6c49a9aab25265dd2f8c237a15dabb22f1df51a08152ffdc40d045d0f1b5d056bff0c9064639a085c29fad89a088ac7ab293a3cfe7712a515e9c68537c8d31f64d8ce586b1c45533a9bed312c05d3fa8fb8d2d71defae66e3fda6da7d36dbdeff662d9dfcac792061ef94e1b6413eef77c859a2ec9f5349b0322d159ade397353e81d4d5f"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x85}, 0x0, &(0x7f0000000a00)={0x20, 0x82, 0x3, "6481d8"}, &(0x7f0000000a40)={0x20, 0x83, 0x1, 'c'}, &(0x7f0000000b40)={0x20, 0x84, 0x4, "bf6a8f03"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "b9e69e"}}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000780)={0x6, 0x0, [{0x4, 0x6, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0xc0000001, 0xe5f, 0x0, 0x7, 0x8001, 0x7, 0x1}, {0xd, 0x2bb, 0x4, 0xd, 0x3, 0x4, 0x400}, {0x2, 0x1, 0x4, 0x6, 0x4, 0x4, 0x3}, {0x1, 0x8d3d, 0x6, 0x7, 0x3ff, 0x1, 0x3}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x2, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0xfe, 0x20}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000180)={0x87f7, 0x1000, 0x4, 0x7, 0x6, 0x1, 0x400, 0x70, r8}, &(0x7f00000001c0)=0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000101001007da5b02d6bd2b373e173771e000000000000000300000a14f40000060a010400000000000000000a0000242c000000030a010800000000000000000a0000030900030073797a310000000009000100738f696c5bfd1d8fbaa7320f234cab3f0908dd1f532d683a797a3000000000140000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000500)="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", 0x298) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000740)=ANY=[@ANYRES8=r0], 0x0) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001600)=ANY=[@ANYBLOB="0100000000002000000000ff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000300200000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r11, @ANYBLOB="0000000001"], 0x38}}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0x2}, 0xffea, &(0x7f00000000c0)=[{&(0x7f0000000240)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 13m2.889448029s ago: executing program 2 (id=1217): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x2, {0x9, 0x21, 0x9, 0xfe, 0x1, {0x22, 0x22b}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x40, 0x5, 0x4}}}}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) close_range(r2, r3, 0x0) 13m1.370598773s ago: executing program 2 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1172402, &(0x7f00000007c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10001}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffffffff7ffb}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}]}}, 0x1, 0x0, &(0x7f0000000440)="4006000000000000008477ad7452efd7ee0109515ff65b88e6efb9b3b3669e040ee6b1e0979308f9719b85255ba41812f3e356204beb372972cf8e353133cf1497f98520d1dac70c4e008614ee035659452e1adb73f6afa57cd306a36804f58030fded685ae8e778473ed108f569ee966fa91ddae5c572495c338189493cc767a7faed0404ee8a392728ab8d8244c39c013adcc15d144918486f212e0d112d753200") symlinkat(&(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000500)='./file0\x00') syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) socket(0x840000000002, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x672742, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r8, 0x100917) accept4(r8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000090601020000000000000000c800ffff180064c2f980976694f39dcb72fd07800c00018008000140ac1e010108000a40000000020900020073797a31000000000500010007000000967c45cde2e026506418bc75b955a666e872c1b801cf6dfbf8b7ceaa3a4fcc94a46f37ad00bd5cdc5f74585d9f6e9aafa5cd423adaf6a499f49d513eb94b27fd290f2eeaeae92d9dfb1bcda976d469171e552a5138b08eccbff8b2b759ee706fec74ee98b136d9896a8c5c4d8b6989bc99e32921927f9126e6ba9b920e6b945b36c2c351169d6614cd84b6f364753e4e75fc3219385ff191dfeafa3b60a6768554167494b6ac5aa280ea00"/257], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$sock_int(r1, 0x1, 0x45, &(0x7f0000000140)=0x8000000, 0x4) 12m59.946341531s ago: executing program 2 (id=1230): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r5 = userfaultfd(0x80001) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='security.apparmor\x00', 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000240)=@urb_type_control={0x2, {0x4, 0x1}, 0x80000001, 0x80, 0x0, 0x0, 0x6b5c8d68, 0x9, 0x0, 0x3, 0x9, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000040)=0x12) r9 = syz_io_uring_setup(0x231, &(0x7f0000000c80)={0x0, 0x0, 0x4000}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r10, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, '('}, {0x20, '\xd1$'}, {0x20, '\x00'}, {}, {0x20, '/dev/audio1\x00'}, {0x20, 'security.apparmor\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}], 0xa, "14d7f44e1f95e20a89"}, 0x57) 12m59.649704604s ago: executing program 2 (id=1232): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x1, @private0, 0x1b8}}, 0x5000, 0x3ff}, 0x90) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x10000000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000340), 0x8) shutdown(r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f000000f100)=[{{&(0x7f0000000380)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000006c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x8000}}, {{&(0x7f0000008c80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008f00)=[{&(0x7f0000008d00)="d0352d36e90a55978264b404b2a841d2707cb4898ce1510bcc3de261527eea4c4e3f3d60a2dfce2f11fbb2ec88c78109f524d89d71effa55c596415083df93d60bec0afbb36c143b51e1d0869f56c7b2d56426bdc06259493f95cee52adcd1f4cfda8bf3204dc2bab49e1f4049a6067a5d0a36942521ce92e73cdbb72564256e11476f97795d27ccdf4cc3559a392ccfbc88513639eaecce10c174771f076f11c88977e0ba69ee73e2bf483e74bde529933d08e06f8f5c44c67dad67e981c480d2f4c7312bdbfed2e8f672442fb0815dd2c3961d57cebc9eba19964906791ecdc80fa9995749b4cab433773e9fe626bd62779f5eca538113", 0xf8}, {0xffffffffffffffff}, {&(0x7f0000008e00)="12f764faca5c72d630cbc7eb64e70b3b2242943992550095d2948b65476ffc27c8f5b65a9f7e67d8924e24dfcc0489d9a961694604e88f4224ce733947666ca156e9fbba53c5510fac736b161722e2d2455b7730736d79d9e0002c4c37e5d83449036eea9d06a2c9adf4e3bb4c88260a1adb468d376c67e3a4f48fdf7722a84b0526100f05f0a7bd3b9a35973d2e8cb28688fa98e08f738d8b0fe83c02fd0476da4495a5d57c38c4146d59f9de71c7640b1639996ef41a59be2ac1462c0d7b06054cef6291a5f2d65c5e08145429887588ce4a7a0385a1666c8fda96170145cd59cc69ad3c3dab", 0xe7}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c03000001000000010000001800000001000000020000002c1b0bd8d8f5a2afd41c25bf0dbe4b4caf54c3fc7683e809f9e3e820fda1dc58abe63247095d6662e4dd38e84a27340638d3a8b959776bd9ee239c19316653295247f30f22df4091bd0fbd51057b1cf9f36d137a784610330274f49f856b8d5835811af6d40fb22096997bf32b78584995c781afe0d3489d2f6a9eec80c371215c9fbcdbd19f90417d165458704bb3c25c1aeaa20af37eb607bf1c317c33919f22120a314877fe7a3c4b942ba163ade285a45b4b038b209aee85de2158f392330ab83b5577fe06baa698", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x54, 0xc000015}}], 0x2, 0x4805) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0xffffffffffffffff, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x508001, 0x0, 0xd9f, 0x2, 0x9, 0x8000, 0xbffffffd}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) fcntl$getownex(r8, 0x10, &(0x7f0000000040)={0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(r9, &(0x7f00000000c0)='fdinfo\x00') 12m59.390523557s ago: executing program 33 (id=1232): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x1, @private0, 0x1b8}}, 0x5000, 0x3ff}, 0x90) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x10000000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000340), 0x8) shutdown(r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f000000f100)=[{{&(0x7f0000000380)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f00000006c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x8000}}, {{&(0x7f0000008c80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008f00)=[{&(0x7f0000008d00)="d0352d36e90a55978264b404b2a841d2707cb4898ce1510bcc3de261527eea4c4e3f3d60a2dfce2f11fbb2ec88c78109f524d89d71effa55c596415083df93d60bec0afbb36c143b51e1d0869f56c7b2d56426bdc06259493f95cee52adcd1f4cfda8bf3204dc2bab49e1f4049a6067a5d0a36942521ce92e73cdbb72564256e11476f97795d27ccdf4cc3559a392ccfbc88513639eaecce10c174771f076f11c88977e0ba69ee73e2bf483e74bde529933d08e06f8f5c44c67dad67e981c480d2f4c7312bdbfed2e8f672442fb0815dd2c3961d57cebc9eba19964906791ecdc80fa9995749b4cab433773e9fe626bd62779f5eca538113", 0xf8}, {0xffffffffffffffff}, {&(0x7f0000008e00)="12f764faca5c72d630cbc7eb64e70b3b2242943992550095d2948b65476ffc27c8f5b65a9f7e67d8924e24dfcc0489d9a961694604e88f4224ce733947666ca156e9fbba53c5510fac736b161722e2d2455b7730736d79d9e0002c4c37e5d83449036eea9d06a2c9adf4e3bb4c88260a1adb468d376c67e3a4f48fdf7722a84b0526100f05f0a7bd3b9a35973d2e8cb28688fa98e08f738d8b0fe83c02fd0476da4495a5d57c38c4146d59f9de71c7640b1639996ef41a59be2ac1462c0d7b06054cef6291a5f2d65c5e08145429887588ce4a7a0385a1666c8fda96170145cd59cc69ad3c3dab", 0xe7}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0c03000001000000010000001800000001000000020000002c1b0bd8d8f5a2afd41c25bf0dbe4b4caf54c3fc7683e809f9e3e820fda1dc58abe63247095d6662e4dd38e84a27340638d3a8b959776bd9ee239c19316653295247f30f22df4091bd0fbd51057b1cf9f36d137a784610330274f49f856b8d5835811af6d40fb22096997bf32b78584995c781afe0d3489d2f6a9eec80c371215c9fbcdbd19f90417d165458704bb3c25c1aeaa20af37eb607bf1c317c33919f22120a314877fe7a3c4b942ba163ade285a45b4b038b209aee85de2158f392330ab83b5577fe06baa698", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x54, 0xc000015}}], 0x2, 0x4805) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x10002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0xffffffffffffffff, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x508001, 0x0, 0xd9f, 0x2, 0x9, 0x8000, 0xbffffffd}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) fcntl$getownex(r8, 0x10, &(0x7f0000000040)={0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(r9, &(0x7f00000000c0)='fdinfo\x00') 12.999081049s ago: executing program 1 (id=4312): request_key(&(0x7f0000000480)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) socket(0x1000000000000010, 0x3, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x208000400, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e26, 0x4e26}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}]}, 0x38}}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r8, 0xe03}, 0x8) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 12.79289271s ago: executing program 1 (id=4313): socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x5, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x3, 0x9, 0x5, 0xfffffe0000000001, 0xfa34, 0x2}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x200012, 0x10015, 0x9, 0xc0cc, 0x2, 0x8c, 0xffffffffffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioprio_get$uid(0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x80000000, &(0x7f0000000000)) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0d882dbd7000fdfc11250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) ioctl$BLKROSET(0xffffffffffffffff, 0x401070cd, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_pgetevents(r6, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040), 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_clone(0x82008480, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 10.184570817s ago: executing program 1 (id=4321): r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_emit_ethernet(0xba, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x4bb, 0x10, 0x6c, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x70, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x9, "8475be675de6a7"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x94, "", [{{0x9, 0x4, 0x0, 0x39, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x929}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x81, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x5, 0x9, 0x20, 0x6}, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0xa, 0x4, 0xe9, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x2c, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}]}) r7 = socket(0x2, 0xa, 0x0) r8 = syz_open_dev$vivid(&(0x7f00000004c0), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0cc5604, &(0x7f00000009c0)={0xd, @meta={0x4f31434d, 0x131b5dbd, 0xff28, 0x1b8d, 0x66a6b453}}) sendfile(r7, r6, 0x0, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) read$FUSE(r6, &(0x7f000000b040)={0x2020}, 0x2020) 8.14108823s ago: executing program 0 (id=4323): unshare(0x6a040000) io_uring_setup(0x104b, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001580)={@val={0x20, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x41, 0x2c, 0xff, @local, @mcast2, {[@routing={0x29, 0x0, 0x0, 0x2}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x89, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, [], "682554f9706e0fb62d"}}}}}}, 0x77) 7.721267669s ago: executing program 3 (id=4324): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x1, 0x0, 0xac21}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4}) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', r4, 0x80a1, 0x700, 0x1, 0x12, {{0x57, 0x4, 0x0, 0x6, 0x15c, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, {@multicast2, 0x29}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x57e}, {@dev, 0xcd2d}, {@multicast2, 0x4}, {@broadcast, 0xe}]}, @noop, @lsrr={0x83, 0x13, 0xf1, [@remote, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}]}, @cipso={0x86, 0x37, 0x0, [{0x2, 0x9, "41542e98ca7813"}, {0x0, 0xc, "ca41bc83570ecfce124a"}, {0x6, 0x10, "1511525cce0926fc6b0d584ecfad"}, {0x2, 0xc, "75c5d5db23294a6cd516"}]}, @timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@local, 0x2000}, {@rand_addr=0x64010101}]}, @timestamp_addr={0x44, 0x1c, 0x11, 0x1, 0x2, [{@private=0xa010100, 0x1}, {@remote, 0x5}, {@multicast2, 0xb39}]}, @timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x2, [{@local, 0x9}, {@empty, 0x7466}]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x2, [{@empty, 0x7ff}]}, @generic={0x82, 0x2}, @cipso={0x86, 0x6e, 0x0, [{0x5, 0xa, "386189779fb36c43"}, {0x6, 0xf, "a43e813f2c399028eeda038222"}, {0x1, 0x4, "8708"}, {0x6, 0x4, "8904"}, {0x6, 0xa, "a74de8bcab55f7ba"}, {0x2, 0xc, "e58df12454e8852c7bf1"}, {0x5, 0x10, "8a78b854fe9e8fc3f319c013ca3b"}, {0x6, 0xd, "688d1ac5acd1921e87fcb3"}, {0x7, 0x5, "65e0e6"}, {0x6, 0xf, "a847c2935b2531479ff757b3e0"}]}]}}}}}) r5 = openat$procfs(0xffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$KDENABIO(r5, 0x4b36) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) 7.4182332s ago: executing program 0 (id=4325): r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_emit_ethernet(0xbe, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x4bb, 0x10, 0x6c, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a8525dc"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x94, "", [{{0x9, 0x4, 0x0, 0x39, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x929}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x81, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x5, 0x9, 0x20, 0x6}, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0xa, 0x4, 0xe9, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x2c, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}]}) r7 = socket(0x2, 0xa, 0x0) r8 = syz_open_dev$vivid(&(0x7f00000004c0), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0cc5604, &(0x7f00000009c0)={0xd, @meta={0x4f31434d, 0x131b5dbd, 0xff28, 0x1b8d, 0x66a6b453}}) sendfile(r7, r6, 0x0, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) read$FUSE(r6, &(0x7f000000b040)={0x2020}, 0x2020) 6.782224587s ago: executing program 1 (id=4326): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x124, 0x17, 0x1, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d1}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2f}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010104}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x5, 0x0, 0x2000000}, {0x8000000000000001}, 0x4, 0x6e6bbf, 0x0, 0x0, 0x0, 0x1}, 0xfffffffe}}, 0x124}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/236, 0xec) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="0600060000001000feff4e5a0fa6006800000b3290780a010100ffffffff8806aef8165b441ce671ffffffff000000820a01010100000009640101010000000400003297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e45ba1fd90e81492107043a66200000000000300004e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade099d208d78e944ddcdafc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d0143fcc026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77"], 0xfb0) 6.778379686s ago: executing program 6 (id=4327): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x6000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="180000"], 0x18}}], 0x1, 0x4) 6.541025284s ago: executing program 6 (id=4329): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000003000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 6.385757805s ago: executing program 5 (id=4330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x18, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xa30d, 0x200, 0x0, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x31}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 6.292657068s ago: executing program 6 (id=4331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) 6.128915512s ago: executing program 5 (id=4332): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x88400) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r3], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10}, 0x94) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) timer_gettime(r2, &(0x7f0000000c00)) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)="1781e54a4d49761759914aa48e3238125c277a53d15b85d0eb43668ac074dd5d94b7095a003052865c6e1927091627703fb2", 0x32, 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r6, &(0x7f0000008200)=[{{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000c80)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000001200)}}], 0x2, 0x844) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000001c0)={r5, 0x41, &(0x7f0000000140)=""/65}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="0000000085f1707d8349b5626480d671b0746ed3757633fdffffffffffffffc9d6", @ANYRES16=r8, @ANYBLOB="1709001000000000000001000000050007000000000008000c000100000008000a0000000000060002000000000014001f000000000000000000000000000000000014002000fe800000000000000000000000000039"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r10, 0x1e, &(0x7f0000000280)={r4}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 6.072660536s ago: executing program 6 (id=4333): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd61954a5b00eb2f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00000001cb0301008800000086dd00aa9987e1"], 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000880)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3dd"], 0x0) 4.554404139s ago: executing program 1 (id=4334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) lseek(r3, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x188, 0x17, 0xa, 0xa04, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10040010}, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0xe) unshare(0xc040400) socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r5, &(0x7f0000002480)=[{&(0x7f0000000480)="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", 0xefc}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) 4.067042019s ago: executing program 0 (id=4335): r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000040), 0x101, 0x208000) fstat(r1, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x805, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) 4.062203018s ago: executing program 3 (id=4336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002ca2e6e159ae907e434f43d5d1d9bcafdbe8cdb49b5025432ab90c712724da31", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060003000000"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0x0, 0xffffffff, 0xff]}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x81}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x7}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x405c010) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x20, 0x7800, 0x1, 0x7ff, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x66, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@lsrr={0x83, 0x1b, 0xef, [@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @empty, @private=0xa010102, @multicast1]}]}}}}}) 3.884428254s ago: executing program 0 (id=4337): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000090601a1c97bb73d035c2300000000000900020073797a31000000000500010007000000100007800c00018008000140"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 4) 3.84319657s ago: executing program 6 (id=4338): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0107000000000000000067000000080001003c0000000c0099006d000000110000000800c300000000ef0700c40000000000"], 0x38}}, 0x0) 3.637696032s ago: executing program 3 (id=4339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x11) write$cgroup_int(r4, &(0x7f00000000c0)=0x4, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'k'}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x0) r6 = openat(r4, &(0x7f0000000100)='./file0\x00', 0x381040, 0x158) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r8 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x0, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x3e, r8, 0x1, 0x2, 'syz1\x00', &(0x7f0000000640)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @exit, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x3, 0x4, 0x8, 0x2, 0x8, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x800}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x4}, @jmp={0x5, 0x1, 0x5, 0x2, 0x7, 0xffffffffffffffe0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @cb_func={0x18, 0xb}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x1, 0x3, 0x5, 0xfffffffffffffffc, 0x1}], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r3, 0x5, 0x10000000, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.206645553s ago: executing program 0 (id=4340): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x124, 0x17, 0x1, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d1}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2f}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010104}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {0x0, 0x0, 0x5, 0x0, 0x2000000}, {0x8000000000000001}, 0x4, 0x6e6bbf, 0x0, 0x0, 0x0, 0x1}, 0xfffffffe}}, 0x124}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/236, 0xec) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="0600060000001000feff4e5a0fa6006800000b3290780a010100ffffffff8806aef8165b441ce671ffffffff000000820a01010100000009640101010000000400003297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e45ba1fd90e81492107043a66200000000000300004e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade099d208d78e944ddcdafc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d0143fcc026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77"], 0xfb0) 3.204243424s ago: executing program 5 (id=4341): r0 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x805, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) (fail_nth: 2) 3.039041751s ago: executing program 3 (id=4342): socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000003000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 3.037675694s ago: executing program 6 (id=4352): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) lseek(r3, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x160, 0x17, 0xa, 0xa04, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10040010}, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0xe) unshare(0xc040400) socket$l2tp6(0xa, 0x2, 0x73) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r5, &(0x7f0000002480)=[{&(0x7f0000000480)="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", 0xefc}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) 2.56966295s ago: executing program 5 (id=4343): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000003000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 2.402407995s ago: executing program 3 (id=4344): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r0, 0x0, 0x2b) 2.39040653s ago: executing program 5 (id=4345): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) (async) r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x400000000005, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="500000009e7510003704000000000000379800000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006001000080000001400030074756e6c3000"/56], 0x50}}, 0x1020) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="500000009e7510003704000000000000379800000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006001000080000001400030074756e6c3000"/56], 0x50}}, 0x1020) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xdfd00be7e7eec087, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000130000023bbd7000ffdbdf2529e5ef05803f00000000", @ANYRES32=r8, @ANYBLOB="30810000c002000000001000af00000000001d0000020000"], 0x54}}, 0xc001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) (async) write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12) r10 = syz_open_dev$loop(&(0x7f0000000300), 0x6, 0xd0242) ioctl$FIONCLEX(r9, 0x5450) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x2, "3258c5c0d651aa001b0000f4ff40000006183f829cfc9504280000e000"}) (async) ioctl$VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x2, "3258c5c0d651aa001b0000f4ff40000006183f829cfc9504280000e000"}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000009c0)) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r12, 0x0, 0x25, &(0x7f0000000000)={@multicast1, @empty, @local}, 0xc) futex_waitv(&(0x7f0000000740)=[{0x8, &(0x7f0000000000)=0x200000, 0x82}, {0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x82}, {0x81, &(0x7f0000000080)=0x2d, 0x2}, {0x2, &(0x7f00000000c0)=0x7, 0x2}, {0x0, &(0x7f0000000100)=0x3, 0x2}, {0x8000, &(0x7f0000000140)=0xffffffffffffffff, 0x2}, {0x80, &(0x7f0000000980)=0x8929, 0x2}, {0x24da, &(0x7f00000001c0)=0xb, 0x82}, {0x3, &(0x7f0000000240)=0x9, 0x82}, {0x1a8, &(0x7f0000000280), 0x2}, {0x4, &(0x7f00000002c0)=0x4, 0x2}, {0x3, &(0x7f0000000340), 0x2}, {0x6, &(0x7f0000000380)=0x5a, 0x82}, {0x40, &(0x7f00000003c0)=0x1, 0x82}, {0x3, &(0x7f0000000440), 0x2}, {0x5, &(0x7f0000000480), 0x82}, {0xd600, &(0x7f00000004c0)=0x6, 0x82}, {0x887, &(0x7f0000000180), 0x82}, {0x5, &(0x7f0000000540)=0x2, 0x2}, {0x6, &(0x7f0000000580)=0x4, 0x82}, {0xd, &(0x7f0000000700)=0x2, 0x82}], 0x15, 0x0, &(0x7f0000000940)={0x77359400}, 0x1) 2.172101378s ago: executing program 3 (id=4346): r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) write$UHID_INPUT(r0, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') syz_emit_ethernet(0xbe, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x4bb, 0x10, 0x6c, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x74, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0xd, "8475be675de6a70a8525dc"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x94, "", [{{0x9, 0x4, 0x0, 0x39, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x929}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x81, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x5, 0x9, 0x20, 0x6}, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0xa, 0x4, 0xe9, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x2c, 0xf00f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40d}}]}) r7 = socket(0x2, 0xa, 0x0) r8 = syz_open_dev$vivid(&(0x7f00000004c0), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0cc5604, &(0x7f00000009c0)={0xd, @meta={0x4f31434d, 0x131b5dbd, 0xff28, 0x1b8d, 0x66a6b453}}) sendfile(r7, r6, 0x0, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) read$FUSE(r6, &(0x7f000000b040)={0x2020}, 0x2020) 1.641211871s ago: executing program 5 (id=4347): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x1, 0x0, 0xac21}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4}) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @remote}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000000c0)={'gretap0\x00', r4, 0x80a1, 0x700, 0x1, 0x12, {{0x57, 0x4, 0x0, 0x6, 0x15c, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, {@multicast2, 0x29}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x57e}, {@dev, 0xcd2d}, {@multicast2, 0x4}, {@broadcast, 0xe}]}, @noop, @lsrr={0x83, 0x13, 0xf1, [@remote, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}]}, @cipso={0x86, 0x37, 0x0, [{0x2, 0x9, "41542e98ca7813"}, {0x0, 0xc, "ca41bc83570ecfce124a"}, {0x6, 0x10, "1511525cce0926fc6b0d584ecfad"}, {0x2, 0xc, "75c5d5db23294a6cd516"}]}, @timestamp_prespec={0x44, 0x1c, 0xb1, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@local, 0x2000}, {@rand_addr=0x64010101}]}, @timestamp_addr={0x44, 0x1c, 0x11, 0x1, 0x2, [{@private=0xa010100, 0x1}, {@remote, 0x5}, {@multicast2, 0xb39}]}, @timestamp_addr={0x44, 0x14, 0x45, 0x1, 0x2, [{@local, 0x9}, {@empty, 0x7466}]}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x2, [{@empty, 0x7ff}]}, @generic={0x82, 0x2}, @cipso={0x86, 0x6e, 0x0, [{0x5, 0xa, "386189779fb36c43"}, {0x6, 0xf, "a43e813f2c399028eeda038222"}, {0x1, 0x4, "8708"}, {0x6, 0x4, "8904"}, {0x6, 0xa, "a74de8bcab55f7ba"}, {0x2, 0xc, "e58df12454e8852c7bf1"}, {0x5, 0x10, "8a78b854fe9e8fc3f319c013ca3b"}, {0x6, 0xd, "688d1ac5acd1921e87fcb3"}, {0x7, 0x5, "65e0e6"}, {0x6, 0xf, "a847c2935b2531479ff757b3e0"}]}]}}}}}) r5 = openat$procfs(0xffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$KDENABIO(r5, 0x4b36) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) 657.160112ms ago: executing program 0 (id=4348): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) listen(r0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r3) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x401, r4, &(0x7f00000000c0)='E', 0x1, 0x8}]) sendto$inet6(r2, &(0x7f0000000740)="fd", 0x1, 0x11, &(0x7f0000000840)={0xa, 0x4e24, 0x3, @loopback, 0x6b8f}, 0x1c) 0s ago: executing program 1 (id=4349): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): 4] dvb-usb: error while querying for an remote control event. [ 1177.063126][ T808] m920x_read = error: -19 [ 1177.075558][ T808] dvb-usb: error while querying for an remote control event. [ 1177.081004][ T29] audit: type=1326 audit(1778599446.928:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4252" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1701c code=0x7ffc0000 [ 1177.093816][ T5691] dvb-usb: error while querying for an remote control event. [ 1177.129197][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.168154][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.176595][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.197852][ T808] m920x_read = error: -19 [ 1177.213869][ T808] dvb-usb: error while querying for an remote control event. [ 1177.222573][ T5718] m920x_read = error: -19 [ 1177.233953][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.250735][ T29] audit: type=1326 audit(1778599446.928:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4252" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf7f1701c code=0x7ffc0000 [ 1177.274485][ T5718] m920x_read = error: -19 [ 1177.291810][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.338493][ T5718] m920x_read = error: -19 [ 1177.352746][ T29] audit: type=1326 audit(1778599446.928:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4252" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1701c code=0x7ffc0000 [ 1177.364370][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.386666][ T808] m920x_read = error: -19 [ 1177.391110][ T808] dvb-usb: error while querying for an remote control event. [ 1177.402143][ T5691] m920x_read = error: -19 [ 1177.413414][ T5691] dvb-usb: error while querying for an remote control event. [ 1177.434411][ T808] m920x_read = error: -19 [ 1177.440776][ T808] dvb-usb: error while querying for an remote control event. [ 1177.474149][T19524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.486656][T19524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.500768][ T29] audit: type=1326 audit(1778599446.928:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4252" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1701c code=0x7ffc0000 [ 1177.538341][ T5718] m920x_read = error: -19 [ 1177.555950][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.582121][ T29] audit: type=1326 audit(1778599446.928:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4252" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1701c code=0x7ffc0000 [ 1177.584624][ T5718] m920x_read = error: -19 [ 1177.624410][ T808] m920x_read = error: -19 [ 1177.636661][ T808] dvb-usb: error while querying for an remote control event. [ 1177.658933][ T808] m920x_read = error: -19 [ 1177.674574][ T808] dvb-usb: error while querying for an remote control event. [ 1177.682048][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.704690][ T808] m920x_read = error: -19 [ 1177.720710][ T29] audit: type=1326 audit(1778599446.928:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4252" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f1701c code=0x7ffc0000 [ 1177.720941][ T808] dvb-usb: error while querying for an remote control event. [ 1177.765754][ T5718] m920x_read = error: -19 [ 1177.770889][T19559] Cannot find map_set index 2 as target [ 1177.779795][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.804536][ T5718] m920x_read = error: -19 [ 1177.809084][ T5718] dvb-usb: error while querying for an remote control event. [ 1177.817757][ T5691] m920x_read = error: -19 [ 1177.826102][ T5691] dvb-usb: error while querying for an remote control event. [ 1177.856263][ T29] audit: type=1326 audit(1778599446.928:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.1.4252" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f1701c code=0x7ffc0000 [ 1177.904436][ T808] m920x_read = error: -19 [ 1177.911950][ T808] dvb-usb: error while querying for an remote control event. [ 1177.944951][ T808] m920x_read = error: -19 [ 1177.956228][ T808] dvb-usb: error while querying for an remote control event. [ 1177.965741][ T5734] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1177.979804][ T808] m920x_read = error: -19 [ 1178.009028][ T808] dvb-usb: error while querying for an remote control event. [ 1178.018696][ T5691] m920x_read = error: -19 [ 1178.033747][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.043186][ T5718] m920x_read = error: -19 [ 1178.052291][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.084779][ T5718] m920x_read = error: -19 [ 1178.097265][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.135013][ T5734] usb 6-1: Using ep0 maxpacket: 16 [ 1178.143411][ T5734] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.155048][ T5718] m920x_read = error: -19 [ 1178.162492][ T5734] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1178.198513][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.207184][ T5691] m920x_read = error: -19 [ 1178.214946][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.217696][ T5734] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1178.246962][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.255118][ T5691] m920x_read = error: -19 [ 1178.266435][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.280564][ T5734] usb 6-1: Product: syz [ 1178.288854][ T5691] m920x_read = error: -19 [ 1178.291922][ T5734] usb 6-1: Manufacturer: syz [ 1178.306137][ T5734] usb 6-1: SerialNumber: syz [ 1178.322657][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.344336][ T5734] usb 6-1: 0:2 : does not exist [ 1178.356054][ T5691] m920x_read = error: -19 [ 1178.363791][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.371938][ T5718] m920x_read = error: -19 [ 1178.378575][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.393490][ T5734] usb 6-1: unit 6 not found! [ 1178.404439][ T5718] m920x_read = error: -19 [ 1178.411631][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.461906][ T5691] m920x_read = error: -19 [ 1178.480504][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.494567][ T5691] m920x_read = error: -19 [ 1178.501824][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.511626][ T5718] m920x_read = error: -19 [ 1178.516049][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.546132][ T5718] m920x_read = error: -19 [ 1178.551338][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.562662][ T5734] usb 6-1: USB disconnect, device number 114 [ 1178.595220][ T5718] m920x_read = error: -19 [ 1178.618063][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.625946][ T5691] m920x_read = error: -19 [ 1178.631016][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.641483][ T808] m920x_read = error: -19 [ 1178.649557][ T808] dvb-usb: error while querying for an remote control event. [ 1178.680329][ T5691] m920x_read = error: -19 [ 1178.713643][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.755263][ T5691] m920x_read = error: -19 [ 1178.770835][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.779214][ T5718] m920x_read = error: -19 [ 1178.803212][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.824645][ T5718] m920x_read = error: -19 [ 1178.833837][ T5718] dvb-usb: error while querying for an remote control event. [ 1178.855203][ T5691] m920x_read = error: -19 [ 1178.868037][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.904582][ T5734] usb 4-1: USB disconnect, device number 107 [ 1178.925229][ T5691] m920x_read = error: -19 [ 1178.945194][ T5691] dvb-usb: error while querying for an remote control event. [ 1178.965941][ T5691] m920x_read = error: -19 [ 1178.975835][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.043326][ T5691] m920x_read = error: -19 [ 1179.055617][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.071203][ T5691] m920x_read = error: -19 [ 1179.082307][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.091183][ T5718] m920x_read = error: -19 [ 1179.095696][ T5718] dvb-usb: error while querying for an remote control event. [ 1179.157368][ T5718] m920x_read = error: -19 [ 1179.192138][ T5718] dvb-usb: error while querying for an remote control event. [ 1179.199861][ T5691] m920x_read = error: -19 [ 1179.213274][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.265455][ T5691] m920x_read = error: -19 [ 1179.271727][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.295304][ T5691] m920x_read = error: -19 [ 1179.316058][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.355697][ T5691] m920x_read = error: -19 [ 1179.369837][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.395380][ T5718] m920x_read = error: -19 [ 1179.408103][ T5718] dvb-usb: error while querying for an remote control event. [ 1179.418116][ T808] m920x_read = error: -19 [ 1179.433644][ T808] dvb-usb: error while querying for an remote control event. [ 1179.464463][ T808] m920x_read = error: -19 [ 1179.468875][ T808] dvb-usb: error while querying for an remote control event. [ 1179.525014][ T808] m920x_read = error: -19 [ 1179.529500][ T808] dvb-usb: error while querying for an remote control event. [ 1179.545384][ T5718] m920x_read = error: -19 [ 1179.551674][ T5718] dvb-usb: error while querying for an remote control event. [ 1179.553272][ T29] audit: type=1326 audit(1778599449.478:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19577 comm="syz.3.4265" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 1179.618449][ T5691] m920x_read = error: -19 [ 1179.628410][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.641941][T17847] m920x_read = error: -19 [ 1179.651380][T17847] dvb-usb: error while querying for an remote control event. [ 1179.659908][ T5734] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1179.754506][ T5691] m920x_read = error: -19 [ 1179.760846][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.768902][T17847] m920x_read = error: -19 [ 1179.788764][T17847] dvb-usb: error while querying for an remote control event. [ 1179.796281][ T5718] m920x_read = error: -19 [ 1179.808059][ T5718] dvb-usb: error while querying for an remote control event. [ 1179.815659][ T5691] m920x_read = error: -19 [ 1179.826811][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.899916][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 1179.914378][ T5691] m920x_read = error: -19 [ 1179.921028][ T5691] dvb-usb: error while querying for an remote control event. [ 1179.938757][ T5734] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1179.952065][ T5734] usb 6-1: config 0 has no interface number 0 [ 1179.961055][ T5718] m920x_read = error: -19 [ 1179.972385][ T5734] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1180.007309][ T5718] dvb-usb: error while querying for an remote control event. [ 1180.014882][T17847] m920x_read = error: -19 [ 1180.025262][T17847] dvb-usb: error while querying for an remote control event. [ 1180.050211][T17847] m920x_read = error: -19 [ 1180.063142][T17847] dvb-usb: error while querying for an remote control event. [ 1180.079266][ T5734] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1180.136452][ T5734] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1180.146719][T17847] m920x_read = error: -19 [ 1180.170920][T17847] dvb-usb: error while querying for an remote control event. [ 1180.186020][T17847] m920x_read = error: -19 [ 1180.195320][T17847] dvb-usb: error while querying for an remote control event. [ 1180.208659][T17847] m920x_read = error: -19 [ 1180.216274][T17847] dvb-usb: error while querying for an remote control event. [ 1180.217082][ T5734] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1180.231964][T17847] m920x_read = error: -19 [ 1180.244721][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.263096][ T5734] usb 6-1: Product: syz [ 1180.269284][ T5734] usb 6-1: Manufacturer: syz [ 1180.274124][ T5734] usb 6-1: SerialNumber: syz [ 1180.282977][ T5734] usb 6-1: config 0 descriptor?? [ 1180.293675][ T5734] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1180.296314][T17847] dvb-usb: error while querying for an remote control event. [ 1180.310736][ T5691] m920x_read = error: -19 [ 1180.316617][ T5691] dvb-usb: error while querying for an remote control event. [ 1180.331613][ T5691] m920x_read = error: -19 [ 1180.351195][ T5691] dvb-usb: error while querying for an remote control event. [ 1180.351501][ T5734] em28xx 6-1:0.89: Video interface 89 found: isoc [ 1180.358843][ T5718] m920x_read = error: -19 [ 1180.390476][ T5718] dvb-usb: error while querying for an remote control event. [ 1180.436679][ T5718] m920x_read = error: -19 [ 1180.459355][ T5718] dvb-usb: error while querying for an remote control event. [ 1180.484517][ T5718] m920x_read = error: -19 [ 1180.490001][ T5718] dvb-usb: error while querying for an remote control event. [ 1180.497635][ T5691] m920x_read = error: -19 [ 1180.502139][ T5691] dvb-usb: error while querying for an remote control event. [ 1180.524409][T17847] m920x_read = error: -19 [ 1180.529704][T17847] dvb-usb: error while querying for an remote control event. [ 1180.569084][T19594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.574547][T17847] m920x_read = error: -19 [ 1180.585454][T17847] dvb-usb: error while querying for an remote control event. [ 1180.596935][ T5734] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1180.646842][T17847] m920x_read = error: -19 [ 1180.660747][T17847] dvb-usb: error while querying for an remote control event. [ 1180.669028][ T5691] m920x_read = error: -19 [ 1180.694993][ T5734] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1180.718380][ T5691] dvb-usb: error while querying for an remote control event. [ 1180.727294][T19596] netlink: 'syz.3.4273': attribute type 21 has an invalid length. [ 1180.735287][ T5734] em28xx 6-1:0.89: board has no eeprom [ 1180.737452][T17847] m920x_read = error: -19 [ 1180.755970][T17847] dvb-usb: error while querying for an remote control event. [ 1180.767890][T19596] netlink: 'syz.3.4273': attribute type 1 has an invalid length. [ 1180.783007][T19596] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1180.806569][T17847] m920x_read = error: -19 [ 1180.815082][T17847] dvb-usb: error while querying for an remote control event. [ 1180.835354][ T5734] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1180.844600][ T5734] em28xx 6-1:0.89: analog set to isoc mode. [ 1180.854465][T17847] m920x_read = error: -19 [ 1180.858870][T17847] dvb-usb: error while querying for an remote control event. [ 1180.868020][ T5691] m920x_read = error: -19 [ 1180.872962][ T5691] dvb-usb: error while querying for an remote control event. [ 1180.892873][T12150] em28xx 6-1:0.89: Registering V4L2 extension [ 1180.914602][ T5691] m920x_read = error: -19 [ 1180.925050][ T5691] dvb-usb: error while querying for an remote control event. [ 1180.946550][ T5734] usb 6-1: USB disconnect, device number 115 [ 1180.973892][ T5734] em28xx 6-1:0.89: Disconnecting em28xx [ 1180.988853][T19588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1180.996590][T19588] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1181.023388][ T5691] m920x_read = error: -19 [ 1181.030039][ T5691] dvb-usb: error while querying for an remote control event. [ 1181.037607][T17847] m920x_read = error: -19 [ 1181.043031][T17847] dvb-usb: error while querying for an remote control event. [ 1181.050585][ T5718] m920x_read = error: -19 [ 1181.054955][ T5718] dvb-usb: error while querying for an remote control event. [ 1181.119184][T19588] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1181.134417][ T5718] m920x_read = error: -19 [ 1181.138988][ T5718] dvb-usb: error while querying for an remote control event. [ 1181.161155][T12150] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1181.170252][T12150] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1181.189421][ T5718] m920x_read = error: -19 [ 1181.202989][T12150] em28xx 6-1:0.89: No AC97 audio processor [ 1181.204024][ T5718] dvb-usb: error while querying for an remote control event. [ 1181.217562][T17847] m920x_read = error: -19 [ 1181.243183][T17847] dvb-usb: error while querying for an remote control event. [ 1181.250733][ T5691] m920x_read = error: -19 [ 1181.255243][ T5691] dvb-usb: error while querying for an remote control event. [ 1181.293064][T19588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1181.320591][T12150] usb 6-1: Decoder not found [ 1181.330612][T19588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1181.339857][T12150] em28xx 6-1:0.89: failed to create media graph [ 1181.360498][T12150] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1181.379775][ T5691] m920x_read = error: -19 [ 1181.398191][ T5691] dvb-usb: error while querying for an remote control event. [ 1181.417327][T17847] m920x_read = error: -19 [ 1181.435285][T12150] em28xx 6-1:0.89: Registering snapshot button... [ 1181.451853][T17847] dvb-usb: error while querying for an remote control event. [ 1181.461561][T19588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1181.462152][ T5691] m920x_read = error: -19 [ 1181.510007][ T5691] dvb-usb: error while querying for an remote control event. [ 1181.518077][T17847] m920x_read = error: -19 [ 1181.519234][T12150] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input46 [ 1181.538445][T17847] dvb-usb: error while querying for an remote control event. [ 1181.570047][ T5691] m920x_read = error: -19 [ 1181.611170][T12150] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1181.613515][ T5691] dvb-usb: error while querying for an remote control event. [ 1181.632237][T17847] m920x_read = error: -19 [ 1181.647095][T17847] dvb-usb: error while querying for an remote control event. [ 1181.662516][ T5734] em28xx 6-1:0.89: Closing input extension [ 1181.675121][ T5718] m920x_read = error: -19 [ 1181.680691][ T5734] em28xx 6-1:0.89: Deregistering snapshot button [ 1181.683995][ T5718] dvb-usb: error while querying for an remote control event. [ 1181.708512][ T5691] m920x_read = error: -19 [ 1181.720374][ T5691] dvb-usb: error while querying for an remote control event. [ 1181.728748][T13440] wlan0: Trigger new scan to find an IBSS to join [ 1181.787532][ T5691] m920x_read = error: -19 [ 1181.809939][ T5691] dvb-usb: error while querying for an remote control event. [ 1181.818887][ T5718] m920x_read = error: -19 [ 1181.832656][ T5718] dvb-usb: error while querying for an remote control event. [ 1181.857550][ T808] m920x_read = error: -19 [ 1181.862218][ T808] dvb-usb: error while querying for an remote control event. [ 1181.885022][ T5718] m920x_read = error: -19 [ 1181.897405][ T5718] dvb-usb: error while querying for an remote control event. [ 1181.931478][ T5734] em28xx 6-1:0.89: Freeing device [ 1181.979236][ T5718] m920x_read = error: -19 [ 1182.012892][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.020479][ T5691] m920x_read = error: -19 [ 1182.020495][ T5691] dvb-usb: error while querying for an remote control event. [ 1182.020534][ T5691] m920x_read = error: -19 [ 1182.020544][ T5691] dvb-usb: error while querying for an remote control event. [ 1182.020578][ T5691] m920x_read = error: -19 [ 1182.020588][ T5691] dvb-usb: error while querying for an remote control event. [ 1182.132394][ T5718] m920x_read = error: -19 [ 1182.132423][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.132488][ T5718] m920x_read = error: -19 [ 1182.132507][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.132572][ T5718] m920x_read = error: -19 [ 1182.132590][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.184443][ T5718] m920x_read = error: -19 [ 1182.184483][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.234468][ T5718] m920x_read = error: -19 [ 1182.234496][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.234561][ T5718] m920x_read = error: -19 [ 1182.234580][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.234647][ T5718] m920x_read = error: -19 [ 1182.234665][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.287213][T16043] Bluetooth: hci0: command 0x0c1a tx timeout [ 1182.304468][ T5718] m920x_read = error: -19 [ 1182.304495][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.344456][ T5718] m920x_read = error: -19 [ 1182.344474][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.344509][ T5718] m920x_read = error: -19 [ 1182.344519][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.344553][ T5718] m920x_read = error: -19 [ 1182.344563][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.416001][ T5718] m920x_read = error: -19 [ 1182.416018][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.437941][T12150] usb 7-1: new low-speed USB device number 106 using dummy_hcd [ 1182.464451][ T5718] m920x_read = error: -19 [ 1182.563190][ T5691] m920x_read = error: -19 [ 1182.573129][ T5691] dvb-usb: error while querying for an remote control event. [ 1182.586962][ T5691] m920x_read = error: -19 [ 1182.602582][ T5691] dvb-usb: error while querying for an remote control event. [ 1182.648203][ T808] m920x_read = error: -19 [ 1182.661703][ T808] dvb-usb: error while querying for an remote control event. [ 1182.697281][ T808] m920x_read = error: -19 [ 1182.702426][ T808] dvb-usb: error while querying for an remote control event. [ 1182.764598][ T808] m920x_read = error: -19 [ 1182.769190][T13440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.771715][ T808] dvb-usb: error while querying for an remote control event. [ 1182.812150][T12150] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1182.844968][ T808] m920x_read = error: -19 [ 1182.854717][T12150] usb 7-1: config 0 has no interface number 0 [ 1182.875916][ T808] dvb-usb: error while querying for an remote control event. [ 1182.883368][ T5718] dvb-usb: error while querying for an remote control event. [ 1182.892762][ T808] m920x_read = error: -19 [ 1182.897229][ T808] dvb-usb: error while querying for an remote control event. [ 1182.907675][T12150] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1182.955506][ T808] m920x_read = error: -19 [ 1182.963171][ T808] dvb-usb: error while querying for an remote control event. [ 1182.979880][T12150] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1183.005252][T12150] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1183.015528][ T5718] m920x_read = error: -19 [ 1183.021228][T12150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.046083][ T5718] dvb-usb: error while querying for an remote control event. [ 1183.062759][T12150] usb 7-1: config 0 descriptor?? [ 1183.085438][ T5718] m920x_read = error: -19 [ 1183.105436][T19620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1183.120154][ T5718] dvb-usb: error while querying for an remote control event. [ 1183.130427][ T808] m920x_read = error: -19 [ 1183.138187][ T808] dvb-usb: error while querying for an remote control event. [ 1183.145739][ T5691] m920x_read = error: -19 [ 1183.150223][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.177762][T12150] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1183.203202][ T5691] m920x_read = error: -19 [ 1183.232931][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.270748][ T5691] m920x_read = error: -19 [ 1183.278517][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.286169][T17847] m920x_read = error: -19 [ 1183.290574][T17847] dvb-usb: error while querying for an remote control event. [ 1183.327352][T16043] Bluetooth: hci1: command 0x0c1a tx timeout [ 1183.336345][T17847] m920x_read = error: -19 [ 1183.353399][T17847] dvb-usb: error while querying for an remote control event. [ 1183.361018][ T5691] m920x_read = error: -19 [ 1183.365429][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.424373][ T5691] m920x_read = error: -19 [ 1183.432352][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.441093][T17847] m920x_read = error: -19 [ 1183.449014][T17847] dvb-usb: error while querying for an remote control event. [ 1183.474490][ T5691] m920x_read = error: -19 [ 1183.479708][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.489943][ T808] m920x_read = error: -19 [ 1183.500056][ T808] dvb-usb: error while querying for an remote control event. [ 1183.567076][ T808] m920x_read = error: -19 [ 1183.576193][ T808] dvb-usb: error while querying for an remote control event. [ 1183.594424][ T808] m920x_read = error: -19 [ 1183.614407][ T808] dvb-usb: error while querying for an remote control event. [ 1183.655215][T17847] m920x_read = error: -19 [ 1183.664007][T17847] dvb-usb: error while querying for an remote control event. [ 1183.680300][ T5691] m920x_read = error: -19 [ 1183.689932][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.714492][ T5691] m920x_read = error: -19 [ 1183.726191][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.764469][ T5691] m920x_read = error: -19 [ 1183.772029][ T5691] dvb-usb: error while querying for an remote control event. [ 1183.794952][ T808] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1183.806156][T17847] m920x_read = error: -19 [ 1183.812055][T17847] dvb-usb: error while querying for an remote control event. [ 1183.819892][ T5718] m920x_read = error: -19 [ 1183.828301][ T5718] dvb-usb: error while querying for an remote control event. [ 1183.845050][T12154] m920x_read = error: -19 [ 1183.851764][T12154] dvb-usb: error while querying for an remote control event. [ 1183.966617][T12154] m920x_read = error: -19 [ 1183.972056][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1183.979716][T12154] dvb-usb: error while querying for an remote control event. [ 1183.988647][T17847] m920x_read = error: -19 [ 1183.997621][ T808] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1184.015771][T17847] dvb-usb: error while querying for an remote control event. [ 1184.030164][ T808] usb 4-1: config 0 has no interface number 0 [ 1184.046750][T17847] m920x_read = error: -19 [ 1184.052621][T17847] dvb-usb: error while querying for an remote control event. [ 1184.061694][T12154] m920x_read = error: -19 [ 1184.066170][ T808] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1184.080387][T12154] dvb-usb: error while querying for an remote control event. [ 1184.114695][ T808] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1184.134313][ T808] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1184.142307][T12154] m920x_read = error: -19 [ 1184.158715][T12154] dvb-usb: error while querying for an remote control event. [ 1184.168061][T17847] m920x_read = error: -19 [ 1184.173313][T17847] dvb-usb: error while querying for an remote control event. [ 1184.183535][ T808] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1184.194984][ T5718] m920x_read = error: -19 [ 1184.202706][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.210832][T12154] m920x_read = error: -19 [ 1184.219332][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.219392][T12154] dvb-usb: error while querying for an remote control event. [ 1184.235011][ T808] usb 4-1: Product: syz [ 1184.240819][ T808] usb 4-1: Manufacturer: syz [ 1184.247042][ T808] usb 4-1: SerialNumber: syz [ 1184.282971][ T808] usb 4-1: config 0 descriptor?? [ 1184.301861][ T808] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1184.315039][T12154] m920x_read = error: -19 [ 1184.322610][T12154] dvb-usb: error while querying for an remote control event. [ 1184.330177][T17847] m920x_read = error: -19 [ 1184.335693][ T808] em28xx 4-1:0.89: Video interface 89 found: isoc [ 1184.344045][T17847] dvb-usb: error while querying for an remote control event. [ 1184.351611][ T5718] m920x_read = error: -19 [ 1184.357272][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.364754][T16043] Bluetooth: hci0: command 0x0c1a tx timeout [ 1184.396517][ T5718] m920x_read = error: -19 [ 1184.405521][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.464540][ T5718] m920x_read = error: -19 [ 1184.480678][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.489489][T17847] m920x_read = error: -19 [ 1184.501221][T17847] dvb-usb: error while querying for an remote control event. [ 1184.510451][T12154] m920x_read = error: -19 [ 1184.520172][T12154] dvb-usb: error while querying for an remote control event. [ 1184.532543][ T5718] m920x_read = error: -19 [ 1184.541032][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.594763][ T808] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1184.624922][ T5718] m920x_read = error: -19 [ 1184.645712][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.656619][ T5718] m920x_read = error: -19 [ 1184.661938][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.670717][ T808] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1184.680527][T12154] m920x_read = error: -19 [ 1184.687788][T12154] dvb-usb: error while querying for an remote control event. [ 1184.695472][T17847] m920x_read = error: -19 [ 1184.700052][ T808] em28xx 4-1:0.89: board has no eeprom [ 1184.705661][T17847] dvb-usb: error while querying for an remote control event. [ 1184.755361][T17847] m920x_read = error: -19 [ 1184.764546][ T808] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1184.773075][T17847] dvb-usb: error while querying for an remote control event. [ 1184.786005][ T808] em28xx 4-1:0.89: analog set to isoc mode. [ 1184.799169][T17847] em28xx 4-1:0.89: Registering V4L2 extension [ 1184.821257][ T808] usb 4-1: USB disconnect, device number 108 [ 1184.843187][T12154] m920x_read = error: -19 [ 1184.858367][ T808] em28xx 4-1:0.89: Disconnecting em28xx [ 1184.867792][T12154] dvb-usb: error while querying for an remote control event. [ 1184.884190][ T5718] m920x_read = error: -19 [ 1184.891675][ T5718] dvb-usb: error while querying for an remote control event. [ 1184.900378][T17847] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1184.908408][T17847] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1184.915813][T12154] m920x_read = error: -19 [ 1184.921290][T12154] dvb-usb: error while querying for an remote control event. [ 1184.929944][ T5691] m920x_read = error: -19 [ 1184.938882][ T5691] dvb-usb: error while querying for an remote control event. [ 1184.946518][T17847] em28xx 4-1:0.89: No AC97 audio processor [ 1184.973168][T19636] xt_CT: No such helper "snmp" [ 1184.983625][T17847] usb 4-1: Decoder not found [ 1184.992227][T17847] em28xx 4-1:0.89: failed to create media graph [ 1184.998631][ T5691] m920x_read = error: -19 [ 1185.003308][T17847] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1185.010226][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.020551][T17847] em28xx 4-1:0.89: Registering snapshot button... [ 1185.028230][ T5691] m920x_read = error: -19 [ 1185.034927][T17847] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input47 [ 1185.047791][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.055428][ T5720] m920x_read = error: -19 [ 1185.060385][ T5720] dvb-usb: error while querying for an remote control event. [ 1185.069213][T17847] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1185.083610][ T5691] m920x_read = error: -19 [ 1185.092567][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.103942][ T808] em28xx 4-1:0.89: Closing input extension [ 1185.121951][ T808] em28xx 4-1:0.89: Deregistering snapshot button [ 1185.128699][ T5691] m920x_read = error: -19 [ 1185.141735][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.166439][ T5691] m920x_read = error: -19 [ 1185.172583][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.187424][ T5718] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1185.197870][ T5691] m920x_read = error: -19 [ 1185.209850][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.222379][ T808] em28xx 4-1:0.89: Freeing device [ 1185.227890][T17847] m920x_read = error: -19 [ 1185.234376][T17847] dvb-usb: error while querying for an remote control event. [ 1185.254495][T17847] m920x_read = error: -19 [ 1185.274436][T17847] dvb-usb: error while querying for an remote control event. [ 1185.290871][T17847] m920x_read = error: -19 [ 1185.301156][T17847] dvb-usb: error while querying for an remote control event. [ 1185.344360][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 1185.355996][T17847] m920x_read = error: -19 [ 1185.361814][ T5718] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1185.382253][T17847] dvb-usb: error while querying for an remote control event. [ 1185.395240][ T5718] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1185.406702][ T808] m920x_read = error: -19 [ 1185.411160][T16043] Bluetooth: hci1: command 0x0c1a tx timeout [ 1185.420075][ T808] dvb-usb: error while querying for an remote control event. [ 1185.427723][T17847] m920x_read = error: -19 [ 1185.434334][T17847] dvb-usb: error while querying for an remote control event. [ 1185.441770][ T5718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1185.452370][T17847] m920x_read = error: -19 [ 1185.456878][T17847] dvb-usb: error while querying for an remote control event. [ 1185.464669][ T5718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1185.476540][ T5718] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.497104][ T5718] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1185.506645][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.534440][T17847] m920x_read = error: -19 [ 1185.538905][T17847] dvb-usb: error while querying for an remote control event. [ 1185.546580][ T808] m920x_read = error: -19 [ 1185.553465][ T808] dvb-usb: error while querying for an remote control event. [ 1185.561076][ T5691] m920x_read = error: -19 [ 1185.572906][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.584504][T17847] m920x_read = error: -19 [ 1185.597903][T17847] dvb-usb: error while querying for an remote control event. [ 1185.674628][T17847] m920x_read = error: -19 [ 1185.681277][T17847] dvb-usb: error while querying for an remote control event. [ 1185.694796][ T5691] m920x_read = error: -19 [ 1185.707348][ T5691] dvb-usb: error while querying for an remote control event. [ 1185.717635][T17847] m920x_read = error: -19 [ 1185.730833][T17847] dvb-usb: error while querying for an remote control event. [ 1185.739023][ T808] m920x_read = error: -19 [ 1185.745214][ T5718] usb 6-1: GET_CAPABILITIES returned 0 [ 1185.756279][ T808] dvb-usb: error while querying for an remote control event. [ 1185.766909][ T5718] usbtmc 6-1:16.0: can't read capabilities [ 1185.802587][ T5734] usb 7-1: USB disconnect, device number 106 [ 1185.818505][ T808] m920x_read = error: -19 [ 1185.828885][ T808] dvb-usb: error while querying for an remote control event. [ 1185.854400][ T808] m920x_read = error: -19 [ 1185.864748][ T808] dvb-usb: error while querying for an remote control event. [ 1185.895625][ T808] m920x_read = error: -19 [ 1185.907038][ T808] dvb-usb: error while querying for an remote control event. [ 1185.916556][ T5718] m920x_read = error: -19 [ 1185.926377][ T5718] dvb-usb: error while querying for an remote control event. [ 1185.954497][ T5718] m920x_read = error: -19 [ 1185.963216][ T5718] dvb-usb: error while querying for an remote control event. [ 1185.984052][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.004419][ T5718] m920x_read = error: -19 [ 1186.013751][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.023331][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.034408][ T5718] m920x_read = error: -19 [ 1186.041747][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.054388][T17847] m920x_read = error: -19 [ 1186.059762][T17847] dvb-usb: error while querying for an remote control event. [ 1186.069230][ T808] usb 6-1: USB disconnect, device number 116 [ 1186.085874][ T5718] m920x_read = error: -19 [ 1186.091367][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.104408][T12150] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1186.134537][ T5718] m920x_read = error: -19 [ 1186.144088][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.186770][ T5718] m920x_read = error: -19 [ 1186.206534][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.233455][ T5718] m920x_read = error: -19 [ 1186.248681][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.258419][T17847] m920x_read = error: -19 [ 1186.263710][T19658] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4292'. [ 1186.274603][T12150] usb 4-1: Using ep0 maxpacket: 32 [ 1186.281280][T17847] dvb-usb: error while querying for an remote control event. [ 1186.290536][T12150] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1186.292465][ T5691] m920x_read = error: -19 [ 1186.298942][T12150] usb 4-1: config 0 has no interface number 0 [ 1186.313652][T12150] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1186.324881][T12150] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1186.328257][ T5691] dvb-usb: error while querying for an remote control event. [ 1186.346701][T17847] m920x_read = error: -19 [ 1186.356070][T17847] dvb-usb: error while querying for an remote control event. [ 1186.377096][T12150] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1186.416538][ T5691] m920x_read = error: -19 [ 1186.421152][ T5691] dvb-usb: error while querying for an remote control event. [ 1186.425134][T12150] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1186.428945][T17847] m920x_read = error: -19 [ 1186.444951][T16043] Bluetooth: hci0: command 0x0c1a tx timeout [ 1186.462437][T17847] dvb-usb: error while querying for an remote control event. [ 1186.471197][T12150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.474600][T17847] m920x_read = error: -19 [ 1186.484550][T17847] dvb-usb: error while querying for an remote control event. [ 1186.491606][T12150] usb 4-1: Product: syz [ 1186.494480][T17847] m920x_read = error: -19 [ 1186.504363][T17847] dvb-usb: error while querying for an remote control event. [ 1186.513974][T12150] usb 4-1: Manufacturer: syz [ 1186.521987][T12150] usb 4-1: SerialNumber: syz [ 1186.539497][T12150] usb 4-1: config 0 descriptor?? [ 1186.551284][T12150] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1186.556399][T17847] m920x_read = error: -19 [ 1186.567190][T17847] dvb-usb: error while querying for an remote control event. [ 1186.574772][ T5691] m920x_read = error: -19 [ 1186.580909][ T5691] dvb-usb: error while querying for an remote control event. [ 1186.590147][T12150] em28xx 4-1:0.89: Video interface 89 found: isoc [ 1186.594409][T17847] m920x_read = error: -19 [ 1186.604359][T17847] dvb-usb: error while querying for an remote control event. [ 1186.624440][T17847] m920x_read = error: -19 [ 1186.630107][T17847] dvb-usb: error while querying for an remote control event. [ 1186.684477][T17847] m920x_read = error: -19 [ 1186.694154][T17847] dvb-usb: error while querying for an remote control event. [ 1186.704471][ T5734] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 1186.704481][ T5691] m920x_read = error: -19 [ 1186.724407][ T5718] m920x_read = error: -19 [ 1186.737513][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.752843][ T5691] dvb-usb: error while querying for an remote control event. [ 1186.760471][T17847] m920x_read = error: -19 [ 1186.768024][T17847] dvb-usb: error while querying for an remote control event. [ 1186.844941][T17847] m920x_read = error: -19 [ 1186.856742][T12150] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1186.867110][T17847] dvb-usb: error while querying for an remote control event. [ 1186.879812][ T5691] m920x_read = error: -19 [ 1186.888004][ T5734] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1186.891527][ T5691] dvb-usb: error while querying for an remote control event. [ 1186.897578][ T5734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.905228][ T5718] m920x_read = error: -19 [ 1186.922460][ T808] m920x_read = error: -19 [ 1186.927234][ T808] dvb-usb: error while querying for an remote control event. [ 1186.943142][ T5718] dvb-usb: error while querying for an remote control event. [ 1186.944806][ T5734] usb 7-1: Product: syz [ 1186.960973][T12150] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1186.985428][ T5734] usb 7-1: Manufacturer: syz [ 1186.991703][T12150] em28xx 4-1:0.89: board has no eeprom [ 1187.004863][ T5734] usb 7-1: SerialNumber: syz [ 1187.032503][ T5734] usb 7-1: config 0 descriptor?? [ 1187.034831][ T5718] m920x_read = error: -19 [ 1187.057448][ T5718] dvb-usb: error while querying for an remote control event. [ 1187.057669][ T5734] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1187.065218][ T5691] m920x_read = error: -19 [ 1187.075800][ T808] m920x_read = error: -19 [ 1187.086946][T12150] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1187.087500][ T808] dvb-usb: error while querying for an remote control event. [ 1187.101974][T17847] m920x_read = error: -19 [ 1187.108098][T17847] dvb-usb: error while querying for an remote control event. [ 1187.118957][T12150] em28xx 4-1:0.89: analog set to isoc mode. [ 1187.120718][ T5691] dvb-usb: error while querying for an remote control event. [ 1187.157967][T12156] em28xx 4-1:0.89: Registering V4L2 extension [ 1187.165811][T19668] FAULT_INJECTION: forcing a failure. [ 1187.165811][T19668] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.182447][T12150] usb 4-1: USB disconnect, device number 109 [ 1187.196203][T12150] em28xx 4-1:0.89: Disconnecting em28xx [ 1187.224806][ T5691] m920x_read = error: -19 [ 1187.239849][ T5691] dvb-usb: error while querying for an remote control event. [ 1187.251338][ T808] m920x_read = error: -19 [ 1187.266043][ T808] dvb-usb: error while querying for an remote control event. [ 1187.282789][T12156] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1187.283303][ T808] m920x_read = error: -19 [ 1187.297481][ T808] dvb-usb: error while querying for an remote control event. [ 1187.306739][ T5691] m920x_read = error: -19 [ 1187.311196][ T5691] dvb-usb: error while querying for an remote control event. [ 1187.332053][T12156] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1187.351716][T12156] em28xx 4-1:0.89: No AC97 audio processor [ 1187.369745][T12156] usb 4-1: Decoder not found [ 1187.384484][ T808] m920x_read = error: -19 [ 1187.384652][T12156] em28xx 4-1:0.89: failed to create media graph [ 1187.388955][ T808] dvb-usb: error while querying for an remote control event. [ 1187.403100][ T5691] m920x_read = error: -19 [ 1187.406069][T12156] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1187.426041][ T5691] dvb-usb: error while querying for an remote control event. [ 1187.429046][T12156] em28xx 4-1:0.89: Registering snapshot button... [ 1187.450361][T19668] CPU: 1 UID: 0 PID: 19668 Comm: syz.1.4296 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.450388][T19668] Tainted: [L]=SOFTLOCKUP [ 1187.450395][T19668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1187.450406][T19668] Call Trace: [ 1187.450414][T19668] [ 1187.450421][T19668] dump_stack_lvl+0xe8/0x150 [ 1187.450447][T19668] should_fail_ex+0x412/0x560 [ 1187.450474][T19668] should_failslab+0xa8/0x100 [ 1187.450499][T19668] ? security_inode_alloc+0x39/0x310 [ 1187.450521][T19668] kmem_cache_alloc_noprof+0x87/0x650 [ 1187.450542][T19668] ? __pfx_make_kgid+0x10/0x10 [ 1187.450572][T19668] security_inode_alloc+0x39/0x310 [ 1187.450595][T19668] inode_init_always_gfp+0x9c8/0xda0 [ 1187.450618][T19668] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1187.450637][T19668] alloc_inode+0x82/0x1b0 [ 1187.450657][T19668] new_inode+0x22/0x170 [ 1187.450676][T19668] ? resv_map_alloc+0x1da/0x2c0 [ 1187.450699][T19668] hugetlbfs_get_inode+0x78/0x650 [ 1187.450733][T19668] hugetlb_file_setup+0x21d/0x630 [ 1187.450761][T19668] ksys_mmap_pgoff+0x22e/0x760 [ 1187.450787][T19668] __do_fast_syscall_32+0x229/0x6e0 [ 1187.450813][T19668] ? do_fast_syscall_32+0x33/0x70 [ 1187.450836][T19668] ? lockdep_hardirqs_on+0x7a/0x110 [ 1187.450859][T19668] ? asm_int80_emulation+0x1a/0x20 [ 1187.450874][T19668] ? do_int80_emulation+0x286/0x530 [ 1187.450896][T19668] ? trace_irq_disable+0x3b/0x140 [ 1187.450923][T19668] do_fast_syscall_32+0x33/0x70 [ 1187.450948][T19668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1187.450969][T19668] RIP: 0023:0xf7f1701c [ 1187.450985][T19668] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1187.451000][T19668] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1187.451019][T19668] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 1187.451032][T19668] RDX: 0000000001000003 RSI: 00000000000ec072 RDI: 00000000ffffffff [ 1187.451044][T19668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1187.451054][T19668] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1187.451065][T19668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1187.451090][T19668] [ 1187.686686][T12156] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input48 [ 1187.707476][T16043] Bluetooth: hci1: command 0x0c1a tx timeout [ 1187.724860][T17847] m920x_read = error: -19 [ 1187.729384][T17847] dvb-usb: error while querying for an remote control event. [ 1187.737073][T12156] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1187.746657][T17847] m920x_read = error: -19 [ 1187.751012][T17847] dvb-usb: error while querying for an remote control event. [ 1187.768511][T12150] em28xx 4-1:0.89: Closing input extension [ 1187.783753][T12150] em28xx 4-1:0.89: Deregistering snapshot button [ 1187.914460][ T808] m920x_read = error: -19 [ 1187.918850][ T808] dvb-usb: error while querying for an remote control event. [ 1187.927071][ T5691] m920x_read = error: -19 [ 1187.931439][ T5691] dvb-usb: error while querying for an remote control event. [ 1187.938965][ T5718] m920x_read = error: -19 [ 1187.944151][ T5718] dvb-usb: error while querying for an remote control event. [ 1187.951982][ T808] m920x_read = error: -19 [ 1187.956494][ T808] dvb-usb: error while querying for an remote control event. [ 1187.988397][T12150] em28xx 4-1:0.89: Freeing device [ 1188.057093][ T5718] m920x_read = error: -19 [ 1188.065520][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.092675][ T5718] m920x_read = error: -19 [ 1188.100690][ T808] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1188.119140][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.139727][ T5691] m920x_read = error: -19 [ 1188.171166][ T5691] dvb-usb: error while querying for an remote control event. [ 1188.185330][ T5718] m920x_read = error: -19 [ 1188.213196][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.220984][T17847] m920x_read = error: -19 [ 1188.232929][T17847] dvb-usb: error while querying for an remote control event. [ 1188.274403][T17847] m920x_read = error: -19 [ 1188.291805][T17847] dvb-usb: error while querying for an remote control event. [ 1188.309791][ T808] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1188.309822][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.313186][ T808] usb 6-1: config 0 descriptor?? [ 1188.334612][ T5720] m920x_read = error: -19 [ 1188.334637][ T5720] dvb-usb: error while querying for an remote control event. [ 1188.344402][ T5720] m920x_read = error: -19 [ 1188.344425][ T5720] dvb-usb: error while querying for an remote control event. [ 1188.354856][ T5718] m920x_read = error: -19 [ 1188.354872][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.445245][ T5718] m920x_read = error: -19 [ 1188.445271][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.459237][ T5718] m920x_read = error: -19 [ 1188.459264][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.459370][ T5718] m920x_read = error: -19 [ 1188.459386][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.464431][ T5718] m920x_read = error: -19 [ 1188.464454][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.557233][ T5718] m920x_read = error: -19 [ 1188.557260][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.560318][T19676] fuse: Bad value for 'group_id' [ 1188.629361][ T5718] m920x_read = error: -19 [ 1188.638605][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.638931][ T5718] m920x_read = error: -19 [ 1188.638970][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.639011][ T5718] m920x_read = error: -19 [ 1188.639052][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.664506][ T5718] m920x_read = error: -19 [ 1188.664535][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.717538][ T808] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1188.728962][T19676] fuse: Bad value for 'group_id' [ 1188.764701][ T5718] m920x_read = error: -19 [ 1188.776810][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.787557][T17847] m920x_read = error: -19 [ 1188.787581][T17847] dvb-usb: error while querying for an remote control event. [ 1188.787657][T17847] m920x_read = error: -19 [ 1188.813050][ T5718] m920x_read = error: -19 [ 1188.821079][ T5718] dvb-usb: error while querying for an remote control event. [ 1188.847766][T17847] dvb-usb: error while querying for an remote control event. [ 1188.895001][T17847] m920x_read = error: -19 [ 1188.899643][T17847] dvb-usb: error while querying for an remote control event. [ 1188.918339][T17847] m920x_read = error: -19 [ 1188.926475][T17847] dvb-usb: error while querying for an remote control event. [ 1188.956295][T17847] m920x_read = error: -19 [ 1188.974659][T17847] dvb-usb: error while querying for an remote control event. [ 1188.996273][T17847] m920x_read = error: -19 [ 1189.015642][T17847] dvb-usb: error while querying for an remote control event. [ 1189.055632][T17847] m920x_read = error: -19 [ 1189.076192][T17847] dvb-usb: error while querying for an remote control event. [ 1189.088236][ T808] [drm:udl_init] *ERROR* Selecting channel failed [ 1189.154634][T17847] m920x_read = error: -19 [ 1189.176037][T17847] dvb-usb: error while querying for an remote control event. [ 1189.188082][ T808] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1189.205121][T17847] m920x_read = error: -19 [ 1189.209728][ T808] [drm] Initialized udl on minor 2 [ 1189.224576][T17847] dvb-usb: error while querying for an remote control event. [ 1189.239593][ T808] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1189.249533][T17847] m920x_read = error: -19 [ 1189.254029][T17847] dvb-usb: error while querying for an remote control event. [ 1189.261967][ T5718] m920x_read = error: -19 [ 1189.269785][ T5718] dvb-usb: error while querying for an remote control event. [ 1189.281836][ T808] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1189.293792][ T5691] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1189.315164][ T5718] m920x_read = error: -19 [ 1189.336593][ T5718] dvb-usb: error while querying for an remote control event. [ 1189.362247][ T5718] m920x_read = error: -19 [ 1189.367439][ T5691] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1189.380258][ T808] usb 6-1: USB disconnect, device number 117 [ 1189.390634][ T5718] dvb-usb: error while querying for an remote control event. [ 1189.413446][T17847] m920x_read = error: -19 [ 1189.422260][ T5691] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1189.428959][T17847] dvb-usb: error while querying for an remote control event. [ 1189.436635][ T5720] m920x_read = error: -19 [ 1189.441796][ T5720] dvb-usb: error while querying for an remote control event. [ 1189.486036][ T5691] m920x_read = error: -19 [ 1189.500279][ T5691] dvb-usb: error while querying for an remote control event. [ 1189.554434][ T5691] m920x_read = error: -19 [ 1189.567467][ T5691] dvb-usb: error while querying for an remote control event. [ 1189.575466][ T5720] m920x_read = error: -19 [ 1189.593021][ T5720] dvb-usb: error while querying for an remote control event. [ 1189.600907][T17847] m920x_read = error: -19 [ 1189.608176][T17847] dvb-usb: error while querying for an remote control event. [ 1189.645382][T17847] m920x_read = error: -19 [ 1189.656460][T17847] dvb-usb: error while querying for an remote control event. [ 1189.714437][T17847] m920x_read = error: -19 [ 1189.725483][T17847] dvb-usb: error while querying for an remote control event. [ 1189.754455][ T808] m920x_read = error: -19 [ 1189.762119][ T808] dvb-usb: error while querying for an remote control event. [ 1189.777462][T17847] m920x_read = error: -19 [ 1189.800196][T17847] dvb-usb: error while querying for an remote control event. [ 1189.810642][ T5720] m920x_read = error: -19 [ 1189.822426][ T5720] dvb-usb: error while querying for an remote control event. [ 1189.864387][T17847] m920x_read = error: -19 [ 1189.873130][T17847] dvb-usb: error while querying for an remote control event. [ 1189.924867][T17847] m920x_read = error: -19 [ 1189.952852][T17847] dvb-usb: error while querying for an remote control event. [ 1189.962124][ T5720] m920x_read = error: -19 [ 1189.974556][ T5720] dvb-usb: error while querying for an remote control event. [ 1189.995298][ T5720] m920x_read = error: -19 [ 1190.007019][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.014601][T17847] m920x_read = error: -19 [ 1190.022289][T17847] dvb-usb: error while querying for an remote control event. [ 1190.085103][T17847] m920x_read = error: -19 [ 1190.114884][T17847] dvb-usb: error while querying for an remote control event. [ 1190.162305][T17847] m920x_read = error: -19 [ 1190.177103][T17847] dvb-usb: error while querying for an remote control event. [ 1190.186347][ T5720] m920x_read = error: -19 [ 1190.199280][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.206868][ T808] m920x_read = error: -19 [ 1190.219466][ T808] dvb-usb: error while querying for an remote control event. [ 1190.264398][ T808] m920x_read = error: -19 [ 1190.275730][ T808] dvb-usb: error while querying for an remote control event. [ 1190.314432][ T808] m920x_read = error: -19 [ 1190.334372][ T808] dvb-usb: error while querying for an remote control event. [ 1190.358390][ T808] m920x_read = error: -19 [ 1190.368742][ T808] dvb-usb: error while querying for an remote control event. [ 1190.380743][ T5720] m920x_read = error: -19 [ 1190.393836][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.394409][ T5711] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1190.415623][T17847] m920x_read = error: -19 [ 1190.426564][T17847] dvb-usb: error while querying for an remote control event. [ 1190.469330][T17847] m920x_read = error: -19 [ 1190.486924][T17847] dvb-usb: error while querying for an remote control event. [ 1190.524377][T17847] m920x_read = error: -19 [ 1190.538710][T17847] dvb-usb: error while querying for an remote control event. [ 1190.547022][ T5720] m920x_read = error: -19 [ 1190.559114][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.564361][ T5711] usb 6-1: device descriptor read/64, error -71 [ 1190.566667][ T808] m920x_read = error: -19 [ 1190.598971][ T808] dvb-usb: error while querying for an remote control event. [ 1190.615341][ T5720] m920x_read = error: -19 [ 1190.627477][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.650290][ T5734] gspca_stk1135: reg_w 0x18 err -71 [ 1190.656636][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1190.667719][ T5734] gspca_stk1135: Sensor write failed [ 1190.676414][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1190.690458][ T5720] m920x_read = error: -19 [ 1190.699252][ T5734] gspca_stk1135: Sensor write failed [ 1190.699343][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.727968][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1190.741356][ T5734] gspca_stk1135: Sensor read failed [ 1190.753954][ T5720] m920x_read = error: -19 [ 1190.762182][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1190.783041][ T5734] gspca_stk1135: Sensor read failed [ 1190.792981][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.805062][ T808] m920x_read = error: -19 [ 1190.817559][ T5734] gspca_stk1135: Detected sensor type unknown (0x0) [ 1190.824543][ T5711] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1190.838988][ T808] dvb-usb: error while querying for an remote control event. [ 1190.848109][ T5720] m920x_read = error: -19 [ 1190.854160][ T5720] dvb-usb: error while querying for an remote control event. [ 1190.864686][ T5691] m920x_read = error: -19 [ 1190.865712][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1190.869354][ T5691] dvb-usb: error while querying for an remote control event. [ 1190.901214][ T5734] gspca_stk1135: Sensor read failed [ 1190.915596][ T5691] m920x_read = error: -19 [ 1190.920914][ T5691] dvb-usb: error while querying for an remote control event. [ 1190.935082][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1190.964080][ T5734] gspca_stk1135: Sensor read failed [ 1190.964480][ T5691] m920x_read = error: -19 [ 1190.987634][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.000896][ T5691] dvb-usb: error while querying for an remote control event. [ 1191.004739][ T5711] usb 6-1: device descriptor read/64, error -71 [ 1191.009692][T17847] m920x_read = error: -19 [ 1191.019751][ T5734] gspca_stk1135: Sensor write failed [ 1191.019782][ T5734] gspca_stk1135: serial bus timeout: status=0x00 [ 1191.019794][ T5734] gspca_stk1135: Sensor write failed [ 1191.019869][ T5734] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 1191.045136][ T5720] m920x_read = error: -19 [ 1191.055151][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.066158][ T5720] m920x_read = error: -19 [ 1191.070522][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.084442][T17847] dvb-usb: error while querying for an remote control event. [ 1191.103100][ T5734] usb 7-1: USB disconnect, device number 107 [ 1191.184393][ T808] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1191.192306][T17847] m920x_read = error: -19 [ 1191.206297][ T5711] usb usb6-port1: attempt power cycle [ 1191.208559][T17847] dvb-usb: error while querying for an remote control event. [ 1191.222578][ T5720] m920x_read = error: -19 [ 1191.227354][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.234987][ T5691] m920x_read = error: -19 [ 1191.239888][ T5691] dvb-usb: error while querying for an remote control event. [ 1191.254451][ T5718] m920x_read = error: -19 [ 1191.264350][ T5718] dvb-usb: error while querying for an remote control event. [ 1191.355340][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1191.364561][ T808] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1191.398680][ T808] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1191.407523][T17847] m920x_read = error: -19 [ 1191.412472][T17847] dvb-usb: error while querying for an remote control event. [ 1191.423764][ T5718] m920x_read = error: -19 [ 1191.430108][ T5718] dvb-usb: error while querying for an remote control event. [ 1191.438290][ T5720] m920x_read = error: -19 [ 1191.443216][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.450931][T17847] m920x_read = error: -19 [ 1191.456851][ T808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1191.466160][T17847] dvb-usb: error while querying for an remote control event. [ 1191.478269][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1191.493743][ T808] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1191.515474][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1191.545356][ T5720] m920x_read = error: -19 [ 1191.549738][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.554350][ T5711] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1191.595216][T17847] m920x_read = error: -19 [ 1191.605358][T17847] dvb-usb: error while querying for an remote control event. [ 1191.612932][ T808] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1191.620094][ T5711] usb 6-1: device descriptor read/8, error -71 [ 1191.649444][T17847] m920x_read = error: -19 [ 1191.657655][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.668916][T17847] dvb-usb: error while querying for an remote control event. [ 1191.686427][ T5720] m920x_read = error: -19 [ 1191.695334][ T808] usb 4-1: config 0 descriptor?? [ 1191.703194][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.724483][T17847] m920x_read = error: -19 [ 1191.750317][T17847] dvb-usb: error while querying for an remote control event. [ 1191.759028][ T5720] m920x_read = error: -19 [ 1191.766194][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.816752][ T5720] m920x_read = error: -19 [ 1191.829435][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.860751][T17847] m920x_read = error: -19 [ 1191.872956][T17847] dvb-usb: error while querying for an remote control event. [ 1191.885980][ T5720] m920x_read = error: -19 [ 1191.895008][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.905806][ T5711] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1191.934931][ T5720] m920x_read = error: -19 [ 1191.958324][ T5711] usb 6-1: device descriptor read/8, error -71 [ 1191.961439][ T5720] dvb-usb: error while querying for an remote control event. [ 1191.990094][ T808] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 110 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1192.023910][T17847] m920x_read = error: -19 [ 1192.040467][T17847] dvb-usb: error while querying for an remote control event. [ 1192.051702][ T808] m920x_read = error: -19 [ 1192.060114][ T808] dvb-usb: error while querying for an remote control event. [ 1192.068074][T17847] m920x_read = error: -19 [ 1192.072520][T17847] dvb-usb: error while querying for an remote control event. [ 1192.087250][ T5711] usb usb6-port1: unable to enumerate USB device [ 1192.125565][T17847] m920x_read = error: -19 [ 1192.133210][T17847] dvb-usb: error while querying for an remote control event. [ 1192.161347][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1192.174434][T17847] m920x_read = error: -19 [ 1192.180111][T17847] dvb-usb: error while querying for an remote control event. [ 1192.191325][ T5711] usb 4-1: USB disconnect, device number 110 [ 1192.201892][ T808] m920x_read = error: -19 [ 1192.216741][ T808] dvb-usb: error while querying for an remote control event. [ 1192.231782][ T5711] usblp0: removed [ 1192.257596][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1192.270894][ T808] m920x_read = error: -19 [ 1192.279508][ T808] dvb-usb: error while querying for an remote control event. [ 1192.292106][T17847] m920x_read = error: -19 [ 1192.300748][T17847] dvb-usb: error while querying for an remote control event. [ 1192.336154][ T808] m920x_read = error: -19 [ 1192.342714][ T808] dvb-usb: error while querying for an remote control event. [ 1192.384372][ T808] m920x_read = error: -19 [ 1192.391197][ T808] dvb-usb: error while querying for an remote control event. [ 1192.415778][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1192.429069][ T808] m920x_read = error: -19 [ 1192.436737][ T808] dvb-usb: error while querying for an remote control event. [ 1192.456709][ T808] m920x_read = error: -19 [ 1192.467306][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1192.476244][ T808] dvb-usb: error while querying for an remote control event. [ 1192.476318][ T808] m920x_read = error: -19 [ 1192.494315][ T808] dvb-usb: error while querying for an remote control event. [ 1192.525714][ T808] m920x_read = error: -19 [ 1192.530551][ T808] dvb-usb: error while querying for an remote control event. [ 1192.577700][ T808] m920x_read = error: -19 [ 1192.583901][ T808] dvb-usb: error while querying for an remote control event. [ 1192.614506][ T5718] m920x_read = error: -19 [ 1192.620923][ T5718] dvb-usb: error while querying for an remote control event. [ 1192.644408][ T808] m920x_read = error: -19 [ 1192.648775][ T808] dvb-usb: error while querying for an remote control event. [ 1192.678146][T17847] m920x_read = error: -19 [ 1192.686625][T17847] dvb-usb: error while querying for an remote control event. [ 1192.739453][T17847] m920x_read = error: -19 [ 1192.739601][T17847] dvb-usb: error while querying for an remote control event. [ 1192.755523][T17847] m920x_read = error: -19 [ 1192.755663][T17847] dvb-usb: error while querying for an remote control event. [ 1192.795634][T17847] m920x_read = error: -19 [ 1192.796015][T17847] dvb-usb: error while querying for an remote control event. [ 1192.834370][T17847] m920x_read = error: -19 [ 1192.834389][T17847] dvb-usb: error while querying for an remote control event. [ 1192.854759][T17847] m920x_read = error: -19 [ 1192.854863][T17847] dvb-usb: error while querying for an remote control event. [ 1192.874339][T17847] m920x_read = error: -19 [ 1192.874357][T17847] dvb-usb: error while querying for an remote control event. [ 1192.918348][T17847] m920x_read = error: -19 [ 1192.918368][T17847] dvb-usb: error while querying for an remote control event. [ 1192.944360][T17847] m920x_read = error: -19 [ 1192.944378][T17847] dvb-usb: error while querying for an remote control event. [ 1192.967407][T17847] m920x_read = error: -19 [ 1192.967432][T17847] dvb-usb: error while querying for an remote control event. [ 1193.014875][T17847] m920x_read = error: -19 [ 1193.014901][T17847] dvb-usb: error while querying for an remote control event. [ 1193.037418][T17847] m920x_read = error: -19 [ 1193.037449][T17847] dvb-usb: error while querying for an remote control event. [ 1193.070233][T17847] m920x_read = error: -19 [ 1193.070258][T17847] dvb-usb: error while querying for an remote control event. [ 1193.105013][T17847] m920x_read = error: -19 [ 1193.105030][T17847] dvb-usb: error while querying for an remote control event. [ 1193.144112][T17847] m920x_read = error: -19 [ 1193.144130][T17847] dvb-usb: error while querying for an remote control event. [ 1193.154430][T17847] m920x_read = error: -19 [ 1193.154456][T17847] dvb-usb: error while querying for an remote control event. [ 1193.175121][T17847] m920x_read = error: -19 [ 1193.175148][T17847] dvb-usb: error while querying for an remote control event. [ 1193.233987][T17847] m920x_read = error: -19 [ 1193.234005][T17847] dvb-usb: error while querying for an remote control event. [ 1193.248259][T17847] m920x_read = error: -19 [ 1193.248284][T17847] dvb-usb: error while querying for an remote control event. [ 1193.272190][ T808] m920x_read = error: -19 [ 1193.272216][ T808] dvb-usb: error while querying for an remote control event. [ 1193.284587][ T808] m920x_read = error: -19 [ 1193.284605][ T808] dvb-usb: error while querying for an remote control event. [ 1193.335873][ T808] m920x_read = error: -19 [ 1193.335899][ T808] dvb-usb: error while querying for an remote control event. [ 1193.354547][T17847] m920x_read = error: -19 [ 1193.354572][T17847] dvb-usb: error while querying for an remote control event. [ 1193.383790][ T808] m920x_read = error: -19 [ 1193.383819][ T808] dvb-usb: error while querying for an remote control event. [ 1193.402905][ T808] m920x_read = error: -19 [ 1193.402931][ T808] dvb-usb: error while querying for an remote control event. [ 1193.460377][T17847] m920x_read = error: -19 [ 1193.460398][T17847] dvb-usb: error while querying for an remote control event. [ 1193.465928][T17847] m920x_read = error: -19 [ 1193.465945][T17847] dvb-usb: error while querying for an remote control event. [ 1193.491361][T17847] m920x_read = error: -19 [ 1193.491379][T17847] dvb-usb: error while querying for an remote control event. [ 1193.504454][T17847] m920x_read = error: -19 [ 1193.504480][T17847] dvb-usb: error while querying for an remote control event. [ 1193.574671][T17847] m920x_read = error: -19 [ 1193.574701][T17847] dvb-usb: error while querying for an remote control event. [ 1193.574790][T17847] m920x_read = error: -19 [ 1193.574809][T17847] dvb-usb: error while querying for an remote control event. [ 1193.595987][T17847] m920x_read = error: -19 [ 1193.596006][ T5734] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1193.596013][T17847] dvb-usb: error while querying for an remote control event. [ 1193.614844][T17847] m920x_read = error: -19 [ 1193.614884][T17847] dvb-usb: error while querying for an remote control event. [ 1193.694453][T17847] m920x_read = error: -19 [ 1193.694480][T17847] dvb-usb: error while querying for an remote control event. [ 1193.694552][T17847] m920x_read = error: -19 [ 1193.694570][T17847] dvb-usb: error while querying for an remote control event. [ 1193.714368][T17847] m920x_read = error: -19 [ 1193.714385][T17847] dvb-usb: error while querying for an remote control event. [ 1193.724439][T17847] m920x_read = error: -19 [ 1193.724464][T17847] dvb-usb: error while querying for an remote control event. [ 1193.734114][T19744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.749958][ T5734] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1193.749975][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.749987][ T5734] usb 4-1: Product: syz [ 1193.750000][ T5734] usb 4-1: Manufacturer: syz [ 1193.750015][ T5734] usb 4-1: SerialNumber: syz [ 1193.752035][ T5734] usb 4-1: config 0 descriptor?? [ 1193.791970][ T5734] usb 4-1: selecting invalid altsetting 3 [ 1193.792000][ T5734] comedi comedi5: could not set alternate setting 3 in high speed [ 1193.792009][ T5734] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1193.814644][T17847] m920x_read = error: -19 [ 1193.814671][T17847] dvb-usb: error while querying for an remote control event. [ 1193.814757][T17847] m920x_read = error: -19 [ 1193.814776][T17847] dvb-usb: error while querying for an remote control event. [ 1193.814792][ T5734] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 1193.824429][T17847] m920x_read = error: -19 [ 1193.824453][T17847] dvb-usb: error while querying for an remote control event. [ 1193.834387][T17847] m920x_read = error: -19 [ 1193.834411][T17847] dvb-usb: error while querying for an remote control event. [ 1193.854359][ T5711] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1193.924517][T17847] m920x_read = error: -19 [ 1193.924548][T17847] dvb-usb: error while querying for an remote control event. [ 1193.924629][T17847] m920x_read = error: -19 [ 1193.924648][T17847] dvb-usb: error while querying for an remote control event. [ 1193.934387][T17847] m920x_read = error: -19 [ 1193.934413][T17847] dvb-usb: error while querying for an remote control event. [ 1193.944382][T17847] m920x_read = error: -19 [ 1193.944407][T17847] dvb-usb: error while querying for an remote control event. [ 1193.958112][ T5734] usb 4-1: USB disconnect, device number 111 [ 1194.007506][ T5711] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1194.007527][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.007538][ T5711] usb 6-1: Product: syz [ 1194.007546][ T5711] usb 6-1: Manufacturer: syz [ 1194.007554][ T5711] usb 6-1: SerialNumber: syz [ 1194.009508][ T5711] usb 6-1: config 0 descriptor?? [ 1194.020616][ T5711] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1194.044600][T17847] m920x_read = error: -19 [ 1194.044627][T17847] dvb-usb: error while querying for an remote control event. [ 1194.044719][T17847] m920x_read = error: -19 [ 1194.044738][T17847] dvb-usb: error while querying for an remote control event. [ 1194.044777][T17847] m920x_read = error: -19 [ 1194.044788][T17847] dvb-usb: error while querying for an remote control event. [ 1194.055001][T17847] m920x_read = error: -19 [ 1194.055028][T17847] dvb-usb: error while querying for an remote control event. [ 1194.164525][T17847] m920x_read = error: -19 [ 1194.164554][T17847] dvb-usb: error while querying for an remote control event. [ 1194.164622][T17847] m920x_read = error: -19 [ 1194.164640][T17847] dvb-usb: error while querying for an remote control event. [ 1194.164723][T17847] m920x_read = error: -19 [ 1194.164742][T17847] dvb-usb: error while querying for an remote control event. [ 1194.164804][T17847] m920x_read = error: -19 [ 1194.164823][T17847] dvb-usb: error while querying for an remote control event. [ 1194.274721][T17847] m920x_read = error: -19 [ 1194.274748][T17847] dvb-usb: error while querying for an remote control event. [ 1194.274824][T17847] m920x_read = error: -19 [ 1194.274843][T17847] dvb-usb: error while querying for an remote control event. [ 1194.274920][T17847] m920x_read = error: -19 [ 1194.274938][T17847] dvb-usb: error while querying for an remote control event. [ 1194.275004][T17847] m920x_read = error: -19 [ 1194.275022][T17847] dvb-usb: error while querying for an remote control event. [ 1194.384454][T17847] m920x_read = error: -19 [ 1194.414312][ T5734] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1194.416303][ T5718] m920x_read = error: -19 [ 1194.868508][ T5734] usb 4-1: device descriptor read/64, error -71 [ 1194.873947][ T808] m920x_read = error: -19 [ 1194.895462][T17847] dvb-usb: error while querying for an remote control event. [ 1194.902904][ T808] dvb-usb: error while querying for an remote control event. [ 1194.910806][T17847] m920x_read = error: -19 [ 1194.915643][T17847] dvb-usb: error while querying for an remote control event. [ 1194.923602][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.017537][T17847] m920x_read = error: -19 [ 1195.026837][T17847] dvb-usb: error while querying for an remote control event. [ 1195.037582][ T5718] m920x_read = error: -19 [ 1195.047665][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.055208][ T808] m920x_read = error: -19 [ 1195.059597][ T808] dvb-usb: error while querying for an remote control event. [ 1195.067068][ T5720] m920x_read = error: -19 [ 1195.071418][ T5720] dvb-usb: error while querying for an remote control event. [ 1195.144634][ T5734] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1195.184746][ T5718] m920x_read = error: -19 [ 1195.191447][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.202195][T17847] m920x_read = error: -19 [ 1195.207192][T17847] dvb-usb: error while querying for an remote control event. [ 1195.215881][ T808] m920x_read = error: -19 [ 1195.220666][ T808] dvb-usb: error while querying for an remote control event. [ 1195.234707][ T5718] m920x_read = error: -19 [ 1195.239070][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.294357][ T5734] usb 4-1: device descriptor read/64, error -71 [ 1195.325279][ T5718] m920x_read = error: -19 [ 1195.334564][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.352028][T19751] xt_CT: No such helper "snmp" [ 1195.364408][ T5718] m920x_read = error: -19 [ 1195.369795][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.377604][ T808] m920x_read = error: -19 [ 1195.385378][ T808] dvb-usb: error while querying for an remote control event. [ 1195.385453][ T808] m920x_read = error: -19 [ 1195.385473][ T808] dvb-usb: error while querying for an remote control event. [ 1195.411885][ T5734] usb usb4-port1: attempt power cycle [ 1195.474441][ T5718] m920x_read = error: -19 [ 1195.480833][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.504401][ T5718] m920x_read = error: -19 [ 1195.508827][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.516356][ T808] m920x_read = error: -19 [ 1195.522300][ T808] dvb-usb: error while querying for an remote control event. [ 1195.531366][ T5718] m920x_read = error: -19 [ 1195.539881][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.594396][ T5718] m920x_read = error: -19 [ 1195.599670][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.624404][ T5718] m920x_read = error: -19 [ 1195.628841][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.634536][T12150] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1195.654413][ T5718] m920x_read = error: -19 [ 1195.658837][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.666399][ T808] m920x_read = error: -19 [ 1195.671057][ T808] dvb-usb: error while querying for an remote control event. [ 1195.684357][T12156] usb 7-1: new low-speed USB device number 108 using dummy_hcd [ 1195.714363][ T808] m920x_read = error: -19 [ 1195.718806][ T808] dvb-usb: error while querying for an remote control event. [ 1195.754578][ T5734] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1195.759537][ T808] m920x_read = error: -19 [ 1195.768497][ T808] dvb-usb: error while querying for an remote control event. [ 1195.776172][ T5718] m920x_read = error: -19 [ 1195.776278][ T5734] usb 4-1: device descriptor read/8, error -71 [ 1195.780806][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.794747][ T5720] m920x_read = error: -19 [ 1195.799349][ T5720] dvb-usb: error while querying for an remote control event. [ 1195.824356][T12150] usb 2-1: Using ep0 maxpacket: 8 [ 1195.831439][T12150] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1195.844360][ T5718] m920x_read = error: -19 [ 1195.848794][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.857730][T12150] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1195.858440][T12156] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1195.877387][T12150] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1195.894024][T12150] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1195.904226][T12156] usb 7-1: config 0 has no interface number 0 [ 1195.904409][ T5718] m920x_read = error: -19 [ 1195.911076][T12150] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.928333][T12156] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1195.939392][T12156] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1195.950575][ T5720] m920x_read = error: -19 [ 1195.958957][ T5720] dvb-usb: error while querying for an remote control event. [ 1195.960642][T12150] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1195.967076][ T808] m920x_read = error: -19 [ 1195.977299][T12156] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1195.982384][ T5718] dvb-usb: error while querying for an remote control event. [ 1195.989412][T12150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.005297][T12156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.011408][ T808] dvb-usb: error while querying for an remote control event. [ 1196.020935][ T5720] m920x_read = error: -19 [ 1196.025579][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.034576][ T5734] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1196.045780][T12156] usb 7-1: config 0 descriptor?? [ 1196.060736][T19756] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1196.074980][ T5734] usb 4-1: device descriptor read/8, error -71 [ 1196.090329][T12156] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1196.119680][ T5720] m920x_read = error: -19 [ 1196.124169][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.134462][ T5720] m920x_read = error: -19 [ 1196.139196][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.146720][ T808] m920x_read = error: -19 [ 1196.151522][ T808] dvb-usb: error while querying for an remote control event. [ 1196.160127][ T5718] m920x_read = error: -19 [ 1196.164923][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.194721][ T5734] usb usb4-port1: unable to enumerate USB device [ 1196.237491][ T5718] m920x_read = error: -19 [ 1196.246430][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.274400][ T5718] m920x_read = error: -19 [ 1196.288720][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.296318][ T808] m920x_read = error: -19 [ 1196.303510][T12150] usb 2-1: GET_CAPABILITIES returned 0 [ 1196.312193][ T808] dvb-usb: error while querying for an remote control event. [ 1196.313384][T12150] usbtmc 2-1:16.0: can't read capabilities [ 1196.320004][ T5718] m920x_read = error: -19 [ 1196.320027][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.374492][ T808] m920x_read = error: -19 [ 1196.392023][ T808] dvb-usb: error while querying for an remote control event. [ 1196.424673][ T808] m920x_read = error: -19 [ 1196.431876][ T808] dvb-usb: error while querying for an remote control event. [ 1196.440496][ T5720] m920x_read = error: -19 [ 1196.448724][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.465819][ T808] m920x_read = error: -19 [ 1196.473754][ T808] dvb-usb: error while querying for an remote control event. [ 1196.515322][ T808] m920x_read = error: -19 [ 1196.525928][ T808] dvb-usb: error while querying for an remote control event. [ 1196.570519][ T808] m920x_read = error: -19 [ 1196.585134][ T808] dvb-usb: error while querying for an remote control event. [ 1196.606689][ T808] m920x_read = error: -19 [ 1196.619182][ T808] dvb-usb: error while querying for an remote control event. [ 1196.630496][ T5720] m920x_read = error: -19 [ 1196.639933][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.654422][ T5718] m920x_read = error: -19 [ 1196.664899][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.714556][ T5718] m920x_read = error: -19 [ 1196.730500][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.754450][ T5718] m920x_read = error: -19 [ 1196.769157][T19751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.780008][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.791391][ T5720] m920x_read = error: -19 [ 1196.804314][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.805044][T19751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.833971][ T5720] m920x_read = error: -19 [ 1196.844768][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.878566][ T5720] m920x_read = error: -19 [ 1196.901730][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.949787][ T5720] m920x_read = error: -19 [ 1196.971056][ T5720] dvb-usb: error while querying for an remote control event. [ 1196.978784][ T5718] m920x_read = error: -19 [ 1196.987374][ T5718] dvb-usb: error while querying for an remote control event. [ 1196.994958][ T808] m920x_read = error: -19 [ 1197.026750][ T808] dvb-usb: error while querying for an remote control event. [ 1197.047131][ T808] m920x_read = error: -19 [ 1197.057169][ T808] dvb-usb: error while querying for an remote control event. [ 1197.154689][ T808] m920x_read = error: -19 [ 1197.170925][ T808] dvb-usb: error while querying for an remote control event. [ 1197.178888][ T5718] m920x_read = error: -19 [ 1197.195627][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.226030][ T5718] m920x_read = error: -19 [ 1197.244648][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.278148][ T5718] m920x_read = error: -19 [ 1197.297525][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.334496][ T5718] m920x_read = error: -19 [ 1197.351201][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.358832][ T5720] m920x_read = error: -19 [ 1197.365050][ T5720] dvb-usb: error while querying for an remote control event. [ 1197.385393][ T5720] m920x_read = error: -19 [ 1197.391269][ T5720] dvb-usb: error while querying for an remote control event. [ 1197.434597][ T5720] m920x_read = error: -19 [ 1197.447577][ T5720] dvb-usb: error while querying for an remote control event. [ 1197.484582][ T5720] m920x_read = error: -19 [ 1197.496908][ T5720] dvb-usb: error while querying for an remote control event. [ 1197.505760][ T5718] m920x_read = error: -19 [ 1197.514142][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.538689][ T5718] m920x_read = error: -19 [ 1197.547914][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.575461][ T5718] m920x_read = error: -19 [ 1197.592323][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.650467][ T5718] m920x_read = error: -19 [ 1197.662096][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.670596][ T5720] m920x_read = error: -19 [ 1197.682022][ T5720] dvb-usb: error while querying for an remote control event. [ 1197.691638][ T808] m920x_read = error: -19 [ 1197.703552][ T808] dvb-usb: error while querying for an remote control event. [ 1197.715924][ T5720] m920x_read = error: -19 [ 1197.723583][ T5720] dvb-usb: error while querying for an remote control event. [ 1197.812818][ T5711] gspca_stk1135: reg_w 0x18 err -71 [ 1197.814610][ T5720] m920x_read = error: -19 [ 1197.823173][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1197.830149][ T5711] gspca_stk1135: Sensor write failed [ 1197.836554][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1197.843012][ T5711] gspca_stk1135: Sensor write failed [ 1197.850919][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1197.851867][ T5720] dvb-usb: error while querying for an remote control event. [ 1197.857835][ T5711] gspca_stk1135: Sensor read failed [ 1197.865564][ T808] m920x_read = error: -19 [ 1197.871015][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1197.902014][ T808] dvb-usb: error while querying for an remote control event. [ 1197.910108][ T5718] m920x_read = error: -19 [ 1197.917078][ T5711] gspca_stk1135: Sensor read failed [ 1197.930741][ T5711] gspca_stk1135: Detected sensor type unknown (0x0) [ 1197.931268][ T5718] dvb-usb: error while querying for an remote control event. [ 1197.945165][T17847] m920x_read = error: -19 [ 1197.952797][T17847] dvb-usb: error while querying for an remote control event. [ 1197.987981][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.007482][ T5711] gspca_stk1135: Sensor read failed [ 1198.032052][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.051682][ T5711] gspca_stk1135: Sensor read failed [ 1198.067153][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.075454][ T5718] m920x_read = error: -19 [ 1198.084665][ T5711] gspca_stk1135: Sensor write failed [ 1198.099489][ T5718] dvb-usb: error while querying for an remote control event. [ 1198.101404][ T5711] gspca_stk1135: serial bus timeout: status=0x00 [ 1198.113527][T17847] m920x_read = error: -19 [ 1198.127210][ T5711] gspca_stk1135: Sensor write failed [ 1198.134470][T12150] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1198.144911][T17847] dvb-usb: error while querying for an remote control event. [ 1198.162021][T17847] m920x_read = error: -19 [ 1198.166476][ T5711] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1198.204315][T17847] dvb-usb: error while querying for an remote control event. [ 1198.220243][ T5711] usb 6-1: USB disconnect, device number 122 [ 1198.246748][T17847] m920x_read = error: -19 [ 1198.251880][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1198.296314][T17847] dvb-usb: error while querying for an remote control event. [ 1198.324229][T17847] usb 2-1: USB disconnect, device number 78 [ 1198.344634][T12150] usb 4-1: Using ep0 maxpacket: 32 [ 1198.363324][ T5718] m920x_read = error: -19 [ 1198.363461][T12150] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1198.373492][ T5718] dvb-usb: error while querying for an remote control event. [ 1198.422796][T19773] xt_CT: No such helper "snmp" [ 1198.424095][ T5718] m920x_read = error: -19 [ 1198.436438][ T5718] dvb-usb: error while querying for an remote control event. [ 1198.449217][ T808] m920x_read = error: -19 [ 1198.450246][T12150] usb 4-1: config 0 has no interface number 0 [ 1198.453592][ T808] dvb-usb: error while querying for an remote control event. [ 1198.469014][T12154] m920x_read = error: -19 [ 1198.473689][ T5691] usb 7-1: USB disconnect, device number 108 [ 1198.480820][T12154] dvb-usb: error while querying for an remote control event. [ 1198.535736][ T808] m920x_read = error: -19 [ 1198.537584][T12150] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1198.550207][ T808] dvb-usb: error while querying for an remote control event. [ 1198.560279][T12154] m920x_read = error: -19 [ 1198.564946][T12154] dvb-usb: error while querying for an remote control event. [ 1198.608367][T12150] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1198.624875][ T808] m920x_read = error: -19 [ 1198.635277][ T808] dvb-usb: error while querying for an remote control event. [ 1198.653675][ T808] m920x_read = error: -19 [ 1198.656910][T12150] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1198.664715][ T808] dvb-usb: error while querying for an remote control event. [ 1198.697945][T12150] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1198.714547][ T808] m920x_read = error: -19 [ 1198.721039][ T808] dvb-usb: error while querying for an remote control event. [ 1198.728606][ T5691] m920x_read = error: -19 [ 1198.737961][ T5691] dvb-usb: error while querying for an remote control event. [ 1198.738806][T12150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.754378][ T808] m920x_read = error: -19 [ 1198.777277][ T808] dvb-usb: error while querying for an remote control event. [ 1198.781600][T12150] usb 4-1: Product: syz [ 1198.785957][ T5691] m920x_read = error: -19 [ 1198.800058][T19782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4328'. [ 1198.810839][T12150] usb 4-1: Manufacturer: syz [ 1198.818927][ T5691] dvb-usb: error while querying for an remote control event. [ 1198.831641][T12150] usb 4-1: SerialNumber: syz [ 1198.866401][ T5691] m920x_read = error: -19 [ 1198.877847][ T5691] dvb-usb: error while querying for an remote control event. [ 1198.885917][ T808] m920x_read = error: -19 [ 1198.890868][T12150] usb 4-1: config 0 descriptor?? [ 1198.909808][ T808] dvb-usb: error while querying for an remote control event. [ 1198.926236][ T5691] m920x_read = error: -19 [ 1198.941141][ T5691] dvb-usb: error while querying for an remote control event. [ 1198.959098][ T808] m920x_read = error: -19 [ 1198.968121][ T808] dvb-usb: error while querying for an remote control event. [ 1198.992728][T12150] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1199.031206][T12150] em28xx 4-1:0.89: Video interface 89 found: isoc [ 1199.056725][ T808] m920x_read = error: -19 [ 1199.070449][ T808] dvb-usb: error while querying for an remote control event. [ 1199.078059][ T5691] m920x_read = error: -19 [ 1199.087369][ T5691] dvb-usb: error while querying for an remote control event. [ 1199.095086][T17847] m920x_read = error: -19 [ 1199.104761][T17847] dvb-usb: error while querying for an remote control event. [ 1199.124473][T17847] m920x_read = error: -19 [ 1199.137959][T17847] dvb-usb: error while querying for an remote control event. [ 1199.238491][T17847] m920x_read = error: -19 [ 1199.257525][T17847] dvb-usb: error while querying for an remote control event. [ 1199.266388][ T5691] m920x_read = error: -19 [ 1199.275613][ T5691] dvb-usb: error while querying for an remote control event. [ 1199.314973][ T5691] m920x_read = error: -19 [ 1199.333548][ T5691] dvb-usb: error while querying for an remote control event. [ 1199.341741][T17847] m920x_read = error: -19 [ 1199.353557][T17847] dvb-usb: error while querying for an remote control event. [ 1199.404447][T17847] m920x_read = error: -19 [ 1199.420989][T17847] dvb-usb: error while querying for an remote control event. [ 1199.430414][ T5691] m920x_read = error: -19 [ 1199.441281][ T5691] dvb-usb: error while querying for an remote control event. [ 1199.476292][ T5691] m920x_read = error: -19 [ 1199.488156][ T5691] dvb-usb: error while querying for an remote control event. [ 1199.496097][ T808] m920x_read = error: -19 [ 1199.510252][ T808] dvb-usb: error while querying for an remote control event. [ 1199.569393][ T808] m920x_read = error: -19 [ 1199.584402][ T808] dvb-usb: error while querying for an remote control event. [ 1199.602365][ T5691] m920x_read = error: -19 [ 1199.604706][T12150] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1199.623634][ T5691] dvb-usb: error while querying for an remote control event. [ 1199.631581][ T808] m920x_read = error: -19 [ 1199.634507][ T5711] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 1199.642968][ T808] dvb-usb: error while querying for an remote control event. [ 1199.654680][T17847] m920x_read = error: -19 [ 1199.665427][T17847] dvb-usb: error while querying for an remote control event. [ 1199.689354][T12150] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1199.714486][T17847] m920x_read = error: -19 [ 1199.723828][T12150] em28xx 4-1:0.89: board has no eeprom [ 1199.737588][T17847] dvb-usb: error while querying for an remote control event. [ 1199.774358][T17847] m920x_read = error: -19 [ 1199.784395][T17847] dvb-usb: error while querying for an remote control event. [ 1199.800685][T17847] m920x_read = error: -19 [ 1199.812550][T17847] dvb-usb: error while querying for an remote control event. [ 1199.814574][T12150] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1199.823064][ T808] m920x_read = error: -19 [ 1199.841302][ T808] dvb-usb: error while querying for an remote control event. [ 1199.862668][ T5711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.878449][T12150] em28xx 4-1:0.89: analog set to isoc mode. [ 1199.893162][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1199.904523][ T808] m920x_read = error: -19 [ 1199.915118][ T5734] em28xx 4-1:0.89: Registering V4L2 extension [ 1199.936527][ T808] dvb-usb: error while querying for an remote control event. [ 1199.947012][T12150] usb 4-1: USB disconnect, device number 116 [ 1199.978569][ T808] m920x_read = error: -19 [ 1199.980654][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1200.019800][ T808] dvb-usb: error while querying for an remote control event. [ 1200.029657][T17847] m920x_read = error: -19 [ 1200.040031][T12150] em28xx 4-1:0.89: Disconnecting em28xx [ 1200.045435][T17847] dvb-usb: error while querying for an remote control event. [ 1200.076251][ T5734] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1200.077793][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 221, setting to 64 [ 1200.085033][T17847] m920x_read = error: -19 [ 1200.100319][ T808] m920x_read = error: -19 [ 1200.110355][ T5734] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1200.130699][ T5734] em28xx 4-1:0.89: No AC97 audio processor [ 1200.141288][ T808] dvb-usb: error while querying for an remote control event. [ 1200.158966][T17847] dvb-usb: error while querying for an remote control event. [ 1200.174903][ T808] m920x_read = error: -19 [ 1200.182407][ T808] dvb-usb: error while querying for an remote control event. [ 1200.197683][ T5734] usb 4-1: Decoder not found [ 1200.202704][ T5711] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.225734][ T5734] em28xx 4-1:0.89: failed to create media graph [ 1200.227416][T17847] m920x_read = error: -19 [ 1200.248604][T17847] dvb-usb: error while querying for an remote control event. [ 1200.276570][T17847] m920x_read = error: -19 [ 1200.291316][T17847] dvb-usb: error while querying for an remote control event. [ 1200.301496][ T808] m920x_read = error: -19 [ 1200.311865][ T808] dvb-usb: error while querying for an remote control event. [ 1200.311885][ T5734] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1200.334434][ T5711] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1200.355554][ T5691] m920x_read = error: -19 [ 1200.368162][ T5691] dvb-usb: error while querying for an remote control event. [ 1200.376424][T17847] m920x_read = error: -19 [ 1200.385699][T17847] dvb-usb: error while querying for an remote control event. [ 1200.409011][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.449025][ T5734] em28xx 4-1:0.89: Registering snapshot button... [ 1200.474375][T17847] m920x_read = error: -19 [ 1200.478997][T17847] dvb-usb: error while querying for an remote control event. [ 1200.486862][ T5691] m920x_read = error: -19 [ 1200.492225][ T5691] dvb-usb: error while querying for an remote control event. [ 1200.514170][ T808] m920x_read = error: -19 [ 1200.522811][ T808] dvb-usb: error while querying for an remote control event. [ 1200.531322][T12154] m920x_read = error: -19 [ 1200.542067][T12154] dvb-usb: error while querying for an remote control event. [ 1200.593266][ T5711] usb 7-1: config 0 descriptor?? [ 1200.602307][ T5734] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input49 [ 1200.644365][T12154] m920x_read = error: -19 [ 1200.648749][T12154] dvb-usb: error while querying for an remote control event. [ 1200.656286][ T808] m920x_read = error: -19 [ 1200.667391][ T808] dvb-usb: error while querying for an remote control event. [ 1200.677030][ T5691] m920x_read = error: -19 [ 1200.694967][ T5691] dvb-usb: error while querying for an remote control event. [ 1200.733628][ T5734] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1200.756293][T12150] em28xx 4-1:0.89: Closing input extension [ 1200.762457][T12150] em28xx 4-1:0.89: Deregistering snapshot button [ 1200.762814][T12154] m920x_read = error: -19 [ 1200.769277][ T5711] rc_core: IR keymap rc-hauppauge not found [ 1200.795100][ T5711] Registered IR keymap rc-empty [ 1200.796155][T12154] dvb-usb: error while querying for an remote control event. [ 1200.808080][ T5691] m920x_read = error: -19 [ 1200.812450][ T5691] dvb-usb: error while querying for an remote control event. [ 1200.824534][T17847] m920x_read = error: -19 [ 1200.830078][T17847] dvb-usb: error while querying for an remote control event. [ 1200.858060][ T5691] m920x_read = error: -19 [ 1200.858688][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1200.887927][T12150] em28xx 4-1:0.89: Freeing device [ 1200.907977][ T5691] dvb-usb: error while querying for an remote control event. [ 1200.926708][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1200.964413][ T5691] m920x_read = error: -19 [ 1200.975475][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1200.995443][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.008161][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input50 [ 1201.057981][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.096405][ T5691] m920x_read = error: -19 [ 1201.106701][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.125320][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.172151][ T5691] m920x_read = error: -19 [ 1201.184801][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.200373][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.208002][T17847] m920x_read = error: -19 [ 1201.222242][T17847] dvb-usb: error while querying for an remote control event. [ 1201.222319][T17847] m920x_read = error: -19 [ 1201.222339][T17847] dvb-usb: error while querying for an remote control event. [ 1201.265649][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.277682][ T5691] m920x_read = error: -19 [ 1201.277699][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.284906][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.304684][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.345201][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.347685][ T5691] m920x_read = error: -19 [ 1201.376152][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.378512][T17847] m920x_read = error: -19 [ 1201.407334][T12154] m920x_read = error: -19 [ 1201.441544][T12154] dvb-usb: error while querying for an remote control event. [ 1201.454695][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.456816][ T808] m920x_read = error: -19 [ 1201.466503][T17847] dvb-usb: error while querying for an remote control event. [ 1201.488065][ T808] dvb-usb: error while querying for an remote control event. [ 1201.498736][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.511428][T19792] ªªªªªª: renamed from vlan0 (while UP) [ 1201.525535][ T5711] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1201.575932][T19810] FAULT_INJECTION: forcing a failure. [ 1201.575932][T19810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1201.590921][ T5711] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1201.599000][ T5691] m920x_read = error: -19 [ 1201.599024][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.599088][ T5691] m920x_read = error: -19 [ 1201.599106][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.654980][ T5691] m920x_read = error: -19 [ 1201.669319][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.686524][T12154] m920x_read = error: -19 [ 1201.690652][ T5711] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1201.705385][T12154] dvb-usb: error while querying for an remote control event. [ 1201.717530][T19812] netlink: 'syz.6.4338': attribute type 196 has an invalid length. [ 1201.728275][ T5691] m920x_read = error: -19 [ 1201.732691][T19810] CPU: 1 UID: 0 PID: 19810 Comm: syz.0.4337 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.732717][T19810] Tainted: [L]=SOFTLOCKUP [ 1201.732723][T19810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1201.732734][T19810] Call Trace: [ 1201.732742][T19810] [ 1201.732749][T19810] dump_stack_lvl+0xe8/0x150 [ 1201.732773][T19810] should_fail_ex+0x412/0x560 [ 1201.732800][T19810] _copy_from_iter+0x1d3/0x1670 [ 1201.732825][T19810] ? rcu_is_watching+0x15/0xb0 [ 1201.732851][T19810] ? __pfx__copy_from_iter+0x10/0x10 [ 1201.732879][T19810] ? netlink_sendmsg+0x650/0xb40 [ 1201.732902][T19810] ? skb_put+0x11b/0x210 [ 1201.732927][T19810] netlink_sendmsg+0x6c0/0xb40 [ 1201.732968][T19810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1201.732994][T19810] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1201.733018][T19810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1201.733044][T19810] ____sys_sendmsg+0x972/0x9f0 [ 1201.733076][T19810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1201.733113][T19810] ___sys_sendmsg+0x2a5/0x360 [ 1201.733135][T19810] ? __lock_acquire+0x6b5/0x2cf0 [ 1201.733157][T19810] ? __pfx____sys_sendmsg+0x10/0x10 [ 1201.733183][T19810] ? kstrtoull+0x12f/0x1d0 [ 1201.733227][T19810] ? __fget_files+0x2a/0x420 [ 1201.733247][T19810] ? __fget_files+0x3a0/0x420 [ 1201.733276][T19810] __sys_sendmmsg+0x2e7/0x4e0 [ 1201.733305][T19810] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1201.733352][T19810] ? fput+0xa0/0xd0 [ 1201.733372][T19810] ? ksys_write+0x242/0x270 [ 1201.733401][T19810] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1201.733427][T19810] __do_fast_syscall_32+0x229/0x6e0 [ 1201.733454][T19810] ? do_fast_syscall_32+0x33/0x70 [ 1201.733476][T19810] ? lockdep_hardirqs_on+0x7a/0x110 [ 1201.733498][T19810] ? asm_int80_emulation+0x1a/0x20 [ 1201.733515][T19810] ? do_int80_emulation+0x286/0x530 [ 1201.733538][T19810] ? trace_irq_disable+0x3b/0x140 [ 1201.733564][T19810] do_fast_syscall_32+0x33/0x70 [ 1201.733589][T19810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1201.733610][T19810] RIP: 0023:0xf7f8501c [ 1201.733626][T19810] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1201.733641][T19810] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1201.733660][T19810] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1201.733673][T19810] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 1201.733684][T19810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1201.733694][T19810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1201.733705][T19810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1201.733731][T19810] [ 1201.734116][ T5691] dvb-usb: error while querying for an remote control event. [ 1201.895710][T19228] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 1201.899160][ T808] m920x_read = error: -19 [ 1202.028226][T17847] m920x_read = error: -19 [ 1202.034357][T17847] dvb-usb: error while querying for an remote control event. [ 1202.047622][T17847] m920x_read = error: -19 [ 1202.051965][T17847] dvb-usb: error while querying for an remote control event. [ 1202.090825][ T808] dvb-usb: error while querying for an remote control event. [ 1202.130250][ T5711] usb 7-1: USB disconnect, device number 109 [ 1202.154451][T12154] m920x_read = error: -19 [ 1202.158858][T12154] dvb-usb: error while querying for an remote control event. [ 1202.166679][ T5691] m920x_read = error: -19 [ 1202.171083][ T5691] dvb-usb: error while querying for an remote control event. [ 1202.204878][T12154] m920x_read = error: -19 [ 1202.209505][T12154] dvb-usb: error while querying for an remote control event. [ 1202.217340][ T5691] m920x_read = error: -19 [ 1202.222063][ T5691] dvb-usb: error while querying for an remote control event. [ 1202.278198][T19821] FAULT_INJECTION: forcing a failure. [ 1202.278198][T19821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.295561][ T5691] m920x_read = error: -19 [ 1202.330105][ T5691] dvb-usb: error while querying for an remote control event. [ 1202.350018][T19228] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1202.369145][T12154] m920x_read = error: -19 [ 1202.395292][T12154] dvb-usb: error while querying for an remote control event. [ 1202.399798][T19821] CPU: 0 UID: 0 PID: 19821 Comm: syz.5.4341 Tainted: G L syzkaller #0 PREEMPT(full) [ 1202.399825][T19821] Tainted: [L]=SOFTLOCKUP [ 1202.399832][T19821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1202.399843][T19821] Call Trace: [ 1202.399851][T19821] [ 1202.399858][T19821] dump_stack_lvl+0xe8/0x150 [ 1202.399890][T19821] should_fail_ex+0x412/0x560 [ 1202.399918][T19821] copy_folio_from_iter_atomic+0x44c/0x1ad0 [ 1202.399942][T19821] ? shmem_allowable_huge_orders+0x309/0x690 [ 1202.399981][T19821] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1202.400012][T19821] ? shmem_write_begin+0x1d8/0x330 [ 1202.400038][T19821] generic_perform_write+0x5d9/0x8f0 [ 1202.400075][T19821] ? __pfx_generic_perform_write+0x10/0x10 [ 1202.400099][T19821] ? do_raw_spin_unlock+0xf5/0x210 [ 1202.400124][T19821] ? mnt_put_write_access_file+0xc0/0x100 [ 1202.400150][T19821] ? file_update_time_flags+0x400/0x4a0 [ 1202.400177][T19821] shmem_file_write_iter+0xf8/0x120 [ 1202.400201][T19821] vfs_write+0x61d/0xb90 [ 1202.400232][T19821] ? __pfx_vfs_write+0x10/0x10 [ 1202.400265][T19821] ? __fget_files+0x2a/0x420 [ 1202.400293][T19821] ksys_write+0x150/0x270 [ 1202.400319][T19821] ? __pfx_ksys_write+0x10/0x10 [ 1202.400351][T19821] __do_fast_syscall_32+0x229/0x6e0 [ 1202.400376][T19821] ? do_fast_syscall_32+0x33/0x70 [ 1202.400398][T19821] ? lockdep_hardirqs_on+0x7a/0x110 [ 1202.400420][T19821] ? asm_int80_emulation+0x1a/0x20 [ 1202.400436][T19821] ? do_int80_emulation+0x286/0x530 [ 1202.400459][T19821] ? trace_irq_disable+0x3b/0x140 [ 1202.400486][T19821] do_fast_syscall_32+0x33/0x70 [ 1202.400509][T19821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1202.400529][T19821] RIP: 0023:0xf708f01c [ 1202.400545][T19821] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1202.400560][T19821] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1202.400578][T19821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1202.400591][T19821] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1202.400601][T19821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1202.400611][T19821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1202.400621][T19821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1202.400649][T19821] [ 1202.472266][T19228] usb 2-1: config 0 has no interface number 0 [ 1202.478304][ T808] m920x_read = error: -19 [ 1202.651515][ T5720] m920x_read = error: -19 [ 1202.663175][ T5720] dvb-usb: error while querying for an remote control event. [ 1202.703802][ T808] dvb-usb: error while querying for an remote control event. [ 1202.722903][T19228] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1202.774415][ T808] m920x_read = error: -19 [ 1202.786438][ T808] dvb-usb: error while querying for an remote control event. [ 1202.794811][T12154] m920x_read = error: -19 [ 1202.799550][T12154] dvb-usb: error while querying for an remote control event. [ 1202.807111][ T5691] m920x_read = error: -19 [ 1202.811552][ T5691] dvb-usb: error while querying for an remote control event. [ 1202.819097][ T5720] m920x_read = error: -19 [ 1202.823489][ T5720] dvb-usb: error while querying for an remote control event. [ 1202.852021][T19228] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1202.934065][T19228] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1202.934468][ T808] m920x_read = error: -19 [ 1202.947676][ T5720] m920x_read = error: -19 [ 1202.954849][ T5720] dvb-usb: error while querying for an remote control event. [ 1202.990302][ T5720] m920x_read = error: -19 [ 1203.001606][ T808] dvb-usb: error while querying for an remote control event. [ 1203.009420][T19228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.011373][ T5720] dvb-usb: error while querying for an remote control event. [ 1203.029166][ T5691] m920x_read = error: -19 [ 1203.038491][ T5691] dvb-usb: error while querying for an remote control event. [ 1203.088764][T19228] usb 2-1: config 0 descriptor?? [ 1203.094445][ T808] m920x_read = error: -19 [ 1203.102053][ T808] dvb-usb: error while querying for an remote control event. [ 1203.137359][T19802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1203.163774][T19228] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1203.170018][ T5691] m920x_read = error: -19 [ 1203.170041][ T5691] dvb-usb: error while querying for an remote control event. [ 1203.170106][ T5691] m920x_read = error: -19 [ 1203.170125][ T5691] dvb-usb: error while querying for an remote control event. [ 1203.200959][T19839] futex_wake_op: syz.5.4345 tries to shift op by 32; fix this program [ 1203.231427][ T808] m920x_read = error: -19 [ 1203.231444][ T808] dvb-usb: error while querying for an remote control event. [ 1203.274436][ T808] m920x_read = error: -19 [ 1203.274454][ T808] dvb-usb: error while querying for an remote control event. [ 1203.274502][ T808] m920x_read = error: -19 [ 1203.274512][ T808] dvb-usb: error while querying for an remote control event. [ 1203.274546][ T808] m920x_read = error: -19 [ 1203.274556][ T808] dvb-usb: error while querying for an remote control event. [ 1203.342129][ T808] m920x_read = error: -19 [ 1203.342152][ T808] dvb-usb: error while querying for an remote control event. [ 1203.385152][T19842] xt_CT: No such helper "snmp" [ 1203.445721][ T808] m920x_read = error: -19 [ 1203.445748][ T808] dvb-usb: error while querying for an remote control event. [ 1203.450376][ T808] m920x_read = error: -19 [ 1203.450390][ T808] dvb-usb: error while querying for an remote control event. [ 1203.450444][ T808] m920x_read = error: -19 [ 1203.450454][ T808] dvb-usb: error while querying for an remote control event. [ 1203.450494][ T808] m920x_read = error: -19 [ 1203.450504][ T808] dvb-usb: error while querying for an remote control event. [ 1203.565031][ T808] m920x_read = error: -19 [ 1203.569470][ T808] dvb-usb: error while querying for an remote control event. [ 1203.581686][ T5691] m920x_read = error: -19 [ 1203.595420][T19228] usb 7-1: new low-speed USB device number 110 using dummy_hcd [ 1203.628995][ T5691] dvb-usb: error while querying for an remote control event. [ 1203.641835][ T808] m920x_read = error: -19 [ 1203.685362][ T808] dvb-usb: error while querying for an remote control event. [ 1203.712133][ T808] m920x_read = error: -19 [ 1203.741600][ T808] dvb-usb: error while querying for an remote control event. [ 1203.749449][ T5691] m920x_read = error: -19 [ 1203.756123][ T5691] dvb-usb: error while querying for an remote control event. [ 1203.779920][T19228] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1203.794365][ T808] m920x_read = error: -19 [ 1203.799109][ T808] dvb-usb: error while querying for an remote control event. [ 1203.801159][T19228] usb 7-1: config 0 has no interface number 0 [ 1203.824410][ T5691] m920x_read = error: -19 [ 1203.839440][ T5691] dvb-usb: error while querying for an remote control event. [ 1203.840368][T19228] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1203.865119][ T5711] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1203.890206][ T808] m920x_read = error: -19 [ 1203.909616][ T808] dvb-usb: error while querying for an remote control event. [ 1203.915053][T19228] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1203.940871][ T5720] m920x_read = error: -19 [ 1203.955422][ T5720] dvb-usb: error while querying for an remote control event. [ 1203.980076][T19228] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1204.003168][ T5720] m920x_read = error: -19 [ 1204.018786][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.019679][T19228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.054637][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 1204.064391][ T808] m920x_read = error: -19 [ 1204.067274][ T5711] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1204.090248][T19228] usb 7-1: config 0 descriptor?? [ 1204.096350][ T808] dvb-usb: error while querying for an remote control event. [ 1204.120693][ T808] m920x_read = error: -19 [ 1204.125465][ T5711] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1204.135796][ T808] dvb-usb: error while querying for an remote control event. [ 1204.135877][ T808] m920x_read = error: -19 [ 1204.135897][ T808] dvb-usb: error while querying for an remote control event. [ 1204.155605][ T5734] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1204.170087][T19838] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1204.184414][ T5720] m920x_read = error: -19 [ 1204.197441][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.222897][T19228] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1204.238502][ T5711] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1204.238562][ T808] m920x_read = error: -19 [ 1204.277870][ T5711] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1204.289085][ T808] dvb-usb: error while querying for an remote control event. [ 1204.289767][ T5711] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.311881][ T5711] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1204.311914][ T5720] m920x_read = error: -19 [ 1204.322367][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.334460][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 1204.343339][ T5691] m920x_read = error: -19 [ 1204.351631][ T5734] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1204.360609][ T5734] usb 6-1: config 0 has no interface number 0 [ 1204.366927][ T5691] dvb-usb: error while querying for an remote control event. [ 1204.368218][ T5734] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1204.399913][ T808] m920x_read = error: -19 [ 1204.414397][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.421862][ T808] dvb-usb: error while querying for an remote control event. [ 1204.454995][ T5720] m920x_read = error: -19 [ 1204.462472][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.491259][ T5734] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1204.540718][ T5720] m920x_read = error: -19 [ 1204.558209][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.558214][ T5734] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1204.587824][ T808] m920x_read = error: -19 [ 1204.598165][ T808] dvb-usb: error while querying for an remote control event. [ 1204.606731][ T5720] m920x_read = error: -19 [ 1204.611084][ T5711] usb 4-1: GET_CAPABILITIES returned 0 [ 1204.621254][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.621291][ T5711] usbtmc 4-1:16.0: can't read capabilities [ 1204.628866][ T5691] m920x_read = error: -19 [ 1204.658518][ T5734] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1204.659584][ T5691] dvb-usb: error while querying for an remote control event. [ 1204.699742][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.714529][ T5720] m920x_read = error: -19 [ 1204.731363][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.748655][T19228] usb 2-1: USB disconnect, device number 79 [ 1204.759713][ T5734] usb 6-1: Product: syz [ 1204.766964][ T5691] m920x_read = error: -19 [ 1204.779260][ T5734] usb 6-1: Manufacturer: syz [ 1204.792090][ T5734] usb 6-1: SerialNumber: syz [ 1204.817546][ T5734] usb 6-1: config 0 descriptor?? [ 1204.819313][ T5691] dvb-usb: error while querying for an remote control event. [ 1204.828770][ T5734] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1204.843424][ T5720] m920x_read = error: -19 [ 1204.856508][T19849] sock: sock_timestamping_bind_phc: sock not bind to device [ 1204.868835][T19842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.880837][ T5720] dvb-usb: error while querying for an remote control event. [ 1204.888710][ T808] m920x_read = error: -19 [ 1204.899249][ T5734] em28xx 6-1:0.89: Video interface 89 found: isoc [ 1204.900109][ T808] dvb-usb: error while querying for an remote control event. [ 1204.916536][ T5691] m920x_read = error: -19 [ 1204.927479][ T5691] dvb-usb: error while querying for an remote control event. [ 1204.928201][T19842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.016254][ T808] m920x_read = error: -19 [ 1205.043219][ T808] dvb-usb: error while querying for an remote control event. [ 1205.056448][ T5691] m920x_read = error: -19 [ 1205.073092][ T5691] dvb-usb: error while querying for an remote control event. [ 1205.082925][ T5720] m920x_read = error: -19 [ 1205.091453][ T5720] dvb-usb: error while querying for an remote control event. [ 1205.100587][ T808] m920x_read = error: -19 [ 1205.112439][ T808] dvb-usb: error while querying for an remote control event. [ 1205.196259][ T808] m920x_read = error: -19 [ 1205.207278][ T808] dvb-usb: error while querying for an remote control event. [ 1205.229086][ T5720] m920x_read = error: -19 [ 1205.243128][ T5720] dvb-usb: error while querying for an remote control event. [ 1205.254624][ T808] m920x_read = error: -19 [ 1205.266944][ T808] dvb-usb: error while querying for an remote control event. [ 1205.275741][ T5691] m920x_read = error: -19 [ 1205.285887][ T5691] dvb-usb: error while querying for an remote control event. [ 1205.336348][ T5734] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1205.346140][ T5691] m920x_read = error: -19 [ 1205.351786][ T5691] dvb-usb: error while querying for an remote control event. [ 1205.385123][ T5720] m920x_read = error: -19 [ 1205.389506][ T5720] dvb-usb: error while querying for an remote control event. [ 1205.406076][ T5720] m920x_read = error: -19 [ 1205.425435][ T5720] dvb-usb: error while querying for an remote control event. [ 1205.438944][ T5720] m920x_read = error: -19 [ 1205.445835][ T5720] dvb-usb: error while querying for an remote control event. [ 1205.467043][ T5734] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1205.484493][ T5734] em28xx 6-1:0.89: board has no eeprom [ 1205.491092][ T5691] m920x_read = error: -19 [ 1205.497679][ T5691] dvb-usb: error while querying for an remote control event. [ 1205.507714][ T808] m920x_read = error: -19 [ 1205.513344][ T808] dvb-usb: error while querying for an remote control event. [ 1205.544595][ T808] m920x_read = error: -19 [ 1205.551881][ T808] dvb-usb: error while querying for an remote control event. [ 1205.559851][ T5734] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1205.571582][ T5734] em28xx 6-1:0.89: analog set to isoc mode. [ 1205.579143][T19228] em28xx 6-1:0.89: Registering V4L2 extension [ 1205.584500][ T808] m920x_read = error: -19 [ 1205.590304][ T808] dvb-usb: error while querying for an remote control event. [ 1205.614740][ T5734] usb 6-1: USB disconnect, device number 123 [ 1205.636188][ T808] m920x_read = error: -19 [ 1205.640734][ T808] dvb-usb: error while querying for an remote control event. [ 1205.642970][ T5734] em28xx 6-1:0.89: Disconnecting em28xx [ 1205.649261][ T5691] m920x_read = error: -19 [ 1205.660090][ T5720] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1205.669840][ T5691] dvb-usb: error while querying for an remote control event. [ 1205.677494][T17847] m920x_read = error: -19 [ 1205.681881][T17847] dvb-usb: error while querying for an remote control event. [ 1205.705232][T12154] m920x_read = error: -19 [ 1205.710167][T12154] dvb-usb: error while querying for an remote control event. [ 1205.713798][T19228] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1205.754817][T19228] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1205.786996][T19228] em28xx 6-1:0.89: No AC97 audio processor [ 1205.794558][T12154] m920x_read = error: -19 [ 1205.801086][T12154] dvb-usb: error while querying for an remote control event. [ 1205.810536][ T5691] m920x_read = error: -19 [ 1205.818332][T19228] usb 6-1: Decoder not found [ 1205.821771][ T5691] dvb-usb: error while querying for an remote control event. [ 1205.831469][ T808] m920x_read = error: -19 [ 1205.832230][T19228] em28xx 6-1:0.89: failed to create media graph [ 1205.850131][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 1205.865988][ T808] dvb-usb: error while querying for an remote control event. [ 1205.867639][T19228] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1205.880378][ T5720] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1205.880404][ T5720] usb 2-1: config 0 has no interface number 0 [ 1205.895521][ T808] m920x_read = error: -19 [ 1205.904923][ T808] dvb-usb: error while querying for an remote control event. [ 1205.919856][ T5720] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1205.944075][ T5720] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1205.969705][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.977940][ T808] m920x_read = error: -19 [ 1205.982553][ T808] dvb-usb: error while querying for an remote control event. [ 1206.004391][ T808] m920x_read = error: -19 [ 1206.010473][ T5720] usb 2-1: config 0 descriptor?? [ 1206.015563][ T808] dvb-usb: error while querying for an remote control event. [ 1206.029118][ T808] m920x_read = error: -19 [ 1206.033631][ T808] dvb-usb: error while querying for an remote control event. [ 1206.045514][ T5691] m920x_read = error: -19 [ 1206.053496][ T5691] dvb-usb: error while querying for an remote control event. [ 1206.058590][T19228] em28xx 6-1:0.89: Registering snapshot button... [ 1206.064530][T19854] ================================================================== [ 1206.075334][T19854] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 1206.082517][T19854] Read of size 4 at addr ffff88802b5e8860 by task v4l_id/19854 [ 1206.090041][T19854] [ 1206.092348][T19854] CPU: 1 UID: 0 PID: 19854 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.092364][T19854] Tainted: [L]=SOFTLOCKUP [ 1206.092367][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1206.092374][T19854] Call Trace: [ 1206.092380][T19854] [ 1206.092384][T19854] dump_stack_lvl+0xe8/0x150 [ 1206.092399][T19854] print_address_description+0x55/0x1e0 [ 1206.092410][T19854] ? v4l2_open+0x395/0x3a0 [ 1206.092423][T19854] print_report+0x58/0x70 [ 1206.092431][T19854] kasan_report+0x117/0x150 [ 1206.092447][T19854] ? v4l2_open+0x395/0x3a0 [ 1206.092461][T19854] v4l2_open+0x395/0x3a0 [ 1206.092475][T19854] chrdev_open+0x4cd/0x5e0 [ 1206.092485][T19854] ? __pfx_chrdev_open+0x10/0x10 [ 1206.092494][T19854] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1206.092509][T19854] ? __pfx_chrdev_open+0x10/0x10 [ 1206.092518][T19854] do_dentry_open+0x785/0x14e0 [ 1206.092532][T19854] vfs_open+0x3b/0x340 [ 1206.092546][T19854] ? path_openat+0x2df0/0x3860 [ 1206.092560][T19854] path_openat+0x2e08/0x3860 [ 1206.092576][T19854] ? __pfx_stack_trace_save+0x10/0x10 [ 1206.092592][T19854] ? stack_depot_save_flags+0x33/0x810 [ 1206.092607][T19854] ? __pfx_path_openat+0x10/0x10 [ 1206.092619][T19854] ? __x64_sys_openat+0x138/0x170 [ 1206.092631][T19854] ? __lock_acquire+0x6b5/0x2cf0 [ 1206.092644][T19854] do_file_open+0x23e/0x4a0 [ 1206.092658][T19854] ? __pfx_do_file_open+0x10/0x10 [ 1206.092675][T19854] ? _raw_spin_unlock+0x28/0x50 [ 1206.092688][T19854] ? alloc_fd+0x64b/0x6c0 [ 1206.092700][T19854] do_sys_openat2+0x113/0x200 [ 1206.092712][T19854] ? __pfx_do_sys_openat2+0x10/0x10 [ 1206.092723][T19854] ? exc_page_fault+0x6a/0xc0 [ 1206.092737][T19854] ? do_user_addr_fault+0xc6f/0x1340 [ 1206.092748][T19854] __x64_sys_openat+0x138/0x170 [ 1206.092759][T19854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.092769][T19854] do_syscall_64+0x15f/0xf80 [ 1206.092783][T19854] ? trace_irq_disable+0x3b/0x140 [ 1206.092798][T19854] ? clear_bhb_loop+0x40/0x90 [ 1206.092810][T19854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.092820][T19854] RIP: 0033:0x7f2e530a7407 [ 1206.092831][T19854] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1206.092840][T19854] RSP: 002b:00007ffdc9238500 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1206.092851][T19854] RAX: ffffffffffffffda RBX: 00007f2e5375e880 RCX: 00007f2e530a7407 [ 1206.092859][T19854] RDX: 0000000000000000 RSI: 00007ffdc9238f1c RDI: ffffffffffffff9c [ 1206.092866][T19854] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1206.092872][T19854] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1206.092878][T19854] R13: 00007ffdc9238750 R14: 00007f2e53863000 R15: 000055a5317034d8 [ 1206.092889][T19854] [ 1206.092892][T19854] [ 1206.366380][T19854] Allocated by task 19228: [ 1206.370770][T19854] kasan_save_track+0x3e/0x80 [ 1206.375430][T19854] __kasan_kmalloc+0x93/0xb0 [ 1206.379998][T19854] __kmalloc_cache_noprof+0x31c/0x660 [ 1206.385349][T19854] em28xx_v4l2_init+0x10b/0x2eb0 [ 1206.390269][T19854] em28xx_init_extension+0x120/0x1c0 [ 1206.395537][T19854] process_scheduled_works+0xb5d/0x1860 [ 1206.401059][T19854] worker_thread+0xa53/0xfc0 [ 1206.405628][T19854] kthread+0x388/0x470 [ 1206.409679][T19854] ret_from_fork+0x514/0xb70 [ 1206.414254][T19854] ret_from_fork_asm+0x1a/0x30 [ 1206.419008][T19854] [ 1206.421309][T19854] Freed by task 19228: [ 1206.425351][T19854] kasan_save_track+0x3e/0x80 [ 1206.430025][T19854] kasan_save_free_info+0x46/0x50 [ 1206.435039][T19854] __kasan_slab_free+0x5c/0x80 [ 1206.439785][T19854] kfree+0x1c5/0x640 [ 1206.443660][T19854] em28xx_v4l2_init+0x1685/0x2eb0 [ 1206.448670][T19854] em28xx_init_extension+0x120/0x1c0 [ 1206.453938][T19854] process_scheduled_works+0xb5d/0x1860 [ 1206.459460][T19854] worker_thread+0xa53/0xfc0 [ 1206.464034][T19854] kthread+0x388/0x470 [ 1206.468082][T19854] ret_from_fork+0x514/0xb70 [ 1206.472652][T19854] ret_from_fork_asm+0x1a/0x30 [ 1206.477398][T19854] [ 1206.479702][T19854] The buggy address belongs to the object at ffff88802b5e8000 [ 1206.479702][T19854] which belongs to the cache kmalloc-8k of size 8192 [ 1206.493732][T19854] The buggy address is located 2144 bytes inside of [ 1206.493732][T19854] freed 8192-byte region [ffff88802b5e8000, ffff88802b5ea000) [ 1206.507679][T19854] [ 1206.509982][T19854] The buggy address belongs to the physical page: [ 1206.516379][T19854] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b5e8 [ 1206.525111][T19854] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1206.533584][T19854] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1206.541119][T19854] page_type: f5(slab) [ 1206.545092][T19854] raw: 00fff00000000040 ffff88813fe1b280 dead000000000100 dead000000000122 [ 1206.553746][T19854] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1206.562310][T19854] head: 00fff00000000040 ffff88813fe1b280 dead000000000100 dead000000000122 [ 1206.571047][T19854] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1206.579696][T19854] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1206.588349][T19854] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1206.596995][T19854] page dumped because: kasan: bad access detected [ 1206.603393][T19854] page_owner tracks the page as allocated [ 1206.609084][T19854] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4948, tgid 4948 (kworker/u9:1), ts 843339692905, free_ts 843216747138 [ 1206.631979][T19854] post_alloc_hook+0x231/0x280 [ 1206.636730][T19854] get_page_from_freelist+0x24ba/0x2540 [ 1206.642259][T19854] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1206.648068][T19854] allocate_slab+0x77/0x660 [ 1206.652549][T19854] refill_objects+0x339/0x3d0 [ 1206.657199][T19854] __pcs_replace_empty_main+0x321/0x720 [ 1206.662727][T19854] __kmalloc_cache_noprof+0x392/0x660 [ 1206.668079][T19854] __hci_conn_add+0x3c4/0x1e00 [ 1206.672821][T19854] le_conn_complete_evt+0x86d/0x16b0 [ 1206.678083][T19854] hci_le_conn_complete_evt+0x187/0x470 [ 1206.683604][T19854] hci_event_packet+0x659/0xef0 [ 1206.688444][T19854] hci_rx_work+0x3ee/0x1040 [ 1206.692965][T19854] process_scheduled_works+0xb5d/0x1860 [ 1206.698492][T19854] worker_thread+0xa53/0xfc0 [ 1206.703063][T19854] kthread+0x388/0x470 [ 1206.707110][T19854] ret_from_fork+0x514/0xb70 [ 1206.711682][T19854] page last free pid 15454 tgid 15454 stack trace: [ 1206.718162][T19854] __free_frozen_pages+0xbc7/0xd30 [ 1206.723264][T19854] __slab_free+0x274/0x2c0 [ 1206.727662][T19854] qlist_free_all+0x99/0x100 [ 1206.732244][T19854] kasan_quarantine_reduce+0x148/0x160 [ 1206.737704][T19854] __kasan_slab_alloc+0x22/0x80 [ 1206.742543][T19854] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 1206.748330][T19854] alloc_inode+0x6a/0x1b0 [ 1206.752642][T19854] new_inode+0x22/0x170 [ 1206.756777][T19854] __debugfs_create_file+0xb8/0x400 [ 1206.761961][T19854] debugfs_create_file_full+0x3f/0x60 [ 1206.767315][T19854] vhci_debugfs_init+0x6f/0x110 [ 1206.772145][T19854] vhci_create_device+0x440/0x650 [ 1206.777142][T19854] vhci_write+0x3ce/0x4a0 [ 1206.781444][T19854] vfs_write+0x61d/0xb90 [ 1206.785664][T19854] ksys_write+0x150/0x270 [ 1206.789974][T19854] __do_fast_syscall_32+0x229/0x6e0 [ 1206.795156][T19854] [ 1206.797454][T19854] Memory state around the buggy address: [ 1206.803066][T19854] ffff88802b5e8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1206.811275][T19854] ffff88802b5e8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1206.819327][T19854] >ffff88802b5e8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1206.827362][T19854] ^ [ 1206.834528][T19854] ffff88802b5e8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1206.842561][T19854] ffff88802b5e8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1206.850622][T19854] ================================================================== [ 1206.864901][ T5720] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1206.875229][ T808] m920x_read = error: -19 [ 1206.879612][ T808] dvb-usb: error while querying for an remote control event. [ 1206.891169][ T808] m920x_read = error: -19 [ 1206.895614][ T808] dvb-usb: error while querying for an remote control event. [ 1206.915257][T19851] FAULT_INJECTION: forcing a failure. [ 1206.915257][T19851] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.984416][ T5720] usb 7-1: USB disconnect, device number 110 [ 1207.015980][T19851] CPU: 1 UID: 0 PID: 19851 Comm: syz.1.4349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.016008][T19851] Tainted: [L]=SOFTLOCKUP [ 1207.016016][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1207.016026][T19851] Call Trace: [ 1207.016034][T19851] [ 1207.016042][T19851] dump_stack_lvl+0xe8/0x150 [ 1207.016068][T19851] should_fail_ex+0x412/0x560 [ 1207.016097][T19851] should_failslab+0xa8/0x100 [ 1207.016122][T19851] ? security_file_alloc+0x34/0x310 [ 1207.016142][T19851] kmem_cache_alloc_noprof+0x87/0x650 [ 1207.016164][T19851] ? rcu_is_watching+0x15/0xb0 [ 1207.016186][T19851] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1207.016211][T19851] security_file_alloc+0x34/0x310 [ 1207.016232][T19851] init_file+0x90/0x2b0 [ 1207.016255][T19851] alloc_empty_file+0x74/0x1d0 [ 1207.016276][T19851] path_openat+0x10f/0x3860 [ 1207.016299][T19851] ? arch_stack_walk+0xfb/0x150 [ 1207.016328][T19851] ? do_getname+0x2e/0x250 [ 1207.016346][T19851] ? stack_trace_save+0xa9/0x100 [ 1207.016371][T19851] ? __pfx_stack_trace_save+0x10/0x10 [ 1207.016396][T19851] ? do_getname+0x2e/0x250 [ 1207.016414][T19851] ? stack_depot_save_flags+0x33/0x810 [ 1207.016439][T19851] ? do_getname+0x2e/0x250 [ 1207.016475][T19851] ? kasan_save_track+0x4f/0x80 [ 1207.016496][T19851] ? kasan_save_track+0x3e/0x80 [ 1207.016516][T19851] ? __kasan_slab_alloc+0x6c/0x80 [ 1207.016540][T19851] ? __pfx_path_openat+0x10/0x10 [ 1207.016565][T19851] ? __ia32_compat_sys_openat+0x131/0x160 [ 1207.016592][T19851] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.016622][T19851] do_file_open+0x23e/0x4a0 [ 1207.016650][T19851] ? __pfx_do_file_open+0x10/0x10 [ 1207.016694][T19851] ? _raw_spin_unlock+0x28/0x50 [ 1207.016715][T19851] ? alloc_fd+0x64b/0x6c0 [ 1207.016745][T19851] do_sys_openat2+0x113/0x200 [ 1207.016768][T19851] ? __pfx_do_sys_openat2+0x10/0x10 [ 1207.016794][T19851] ? ksys_write+0x242/0x270 [ 1207.016821][T19851] ? __pfx_ksys_write+0x10/0x10 [ 1207.016848][T19851] __ia32_compat_sys_openat+0x131/0x160 [ 1207.016875][T19851] do_int80_emulation+0x181/0x530 [ 1207.016900][T19851] ? trace_irq_disable+0x3b/0x140 [ 1207.016923][T19851] ? asm_int80_emulation+0x1a/0x20 [ 1207.016941][T19851] ? clear_bhb_loop+0x40/0x90 [ 1207.016959][T19851] ? clear_bhb_loop+0x40/0x90 [ 1207.016981][T19851] asm_int80_emulation+0x1a/0x20 [ 1207.016998][T19851] RIP: 0023:0xf711616b [ 1207.017015][T19851] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1207.017030][T19851] RSP: 002b:00000000f53d603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1207.017049][T19851] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6100 [ 1207.017061][T19851] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1207.017072][T19851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1207.017083][T19851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1207.017093][T19851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1207.017120][T19851] [ 1207.336206][ T5691] m920x_read = error: -19 [ 1207.340606][ T5691] dvb-usb: error while querying for an remote control event. [ 1207.348185][ T5691] m920x_read = error: -19 [ 1207.352546][ T5691] dvb-usb: error while querying for an remote control event. [ 1207.360017][ T5691] m920x_read = error: -19 [ 1207.364416][ T5691] dvb-usb: error while querying for an remote control event. [ 1207.371860][ T5691] m920x_read = error: -19 [ 1207.376232][ T5691] dvb-usb: error while querying for an remote control event. [ 1207.384189][ T5691] usb 2-1: USB disconnect, device number 80 [ 1207.402064][T19854] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1207.409293][T19854] CPU: 1 UID: 0 PID: 19854 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.419878][T19854] Tainted: [L]=SOFTLOCKUP [ 1207.424185][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1207.434223][T19854] Call Trace: [ 1207.437495][T19854] [ 1207.440413][T19854] vpanic+0x56c/0xa60 [ 1207.444384][T19854] ? __pfx_vpanic+0x10/0x10 [ 1207.448875][T19854] ? __pfx___schedule+0x10/0x10 [ 1207.453718][T19854] panic+0xc5/0xd0 [ 1207.457428][T19854] ? __pfx_panic+0x10/0x10 [ 1207.461836][T19854] ? preempt_schedule_thunk+0x16/0x30 [ 1207.467202][T19854] ? v4l2_open+0x395/0x3a0 [ 1207.471605][T19854] check_panic_on_warn+0x89/0xb0 [ 1207.476528][T19854] ? v4l2_open+0x395/0x3a0 [ 1207.480932][T19854] end_report+0x73/0x170 [ 1207.485166][T19854] ? v4l2_open+0x395/0x3a0 [ 1207.489567][T19854] kasan_report+0x128/0x150 [ 1207.494057][T19854] ? v4l2_open+0x395/0x3a0 [ 1207.498461][T19854] v4l2_open+0x395/0x3a0 [ 1207.502701][T19854] chrdev_open+0x4cd/0x5e0 [ 1207.507103][T19854] ? __pfx_chrdev_open+0x10/0x10 [ 1207.512025][T19854] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1207.518339][T19854] ? __pfx_chrdev_open+0x10/0x10 [ 1207.523260][T19854] do_dentry_open+0x785/0x14e0 [ 1207.528015][T19854] vfs_open+0x3b/0x340 [ 1207.532066][T19854] ? path_openat+0x2df0/0x3860 [ 1207.536816][T19854] path_openat+0x2e08/0x3860 [ 1207.541395][T19854] ? __pfx_stack_trace_save+0x10/0x10 [ 1207.546757][T19854] ? stack_depot_save_flags+0x33/0x810 [ 1207.552203][T19854] ? __pfx_path_openat+0x10/0x10 [ 1207.557127][T19854] ? __x64_sys_openat+0x138/0x170 [ 1207.562141][T19854] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.567063][T19854] do_file_open+0x23e/0x4a0 [ 1207.571555][T19854] ? __pfx_do_file_open+0x10/0x10 [ 1207.576574][T19854] ? _raw_spin_unlock+0x28/0x50 [ 1207.581413][T19854] ? alloc_fd+0x64b/0x6c0 [ 1207.585729][T19854] do_sys_openat2+0x113/0x200 [ 1207.590392][T19854] ? __pfx_do_sys_openat2+0x10/0x10 [ 1207.595574][T19854] ? exc_page_fault+0x6a/0xc0 [ 1207.600238][T19854] ? do_user_addr_fault+0xc6f/0x1340 [ 1207.605508][T19854] __x64_sys_openat+0x138/0x170 [ 1207.610358][T19854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.616407][T19854] do_syscall_64+0x15f/0xf80 [ 1207.620986][T19854] ? trace_irq_disable+0x3b/0x140 [ 1207.626001][T19854] ? clear_bhb_loop+0x40/0x90 [ 1207.630660][T19854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.636535][T19854] RIP: 0033:0x7f2e530a7407 [ 1207.640936][T19854] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1207.660523][T19854] RSP: 002b:00007ffdc9238500 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1207.668923][T19854] RAX: ffffffffffffffda RBX: 00007f2e5375e880 RCX: 00007f2e530a7407 [ 1207.676878][T19854] RDX: 0000000000000000 RSI: 00007ffdc9238f1c RDI: ffffffffffffff9c [ 1207.684834][T19854] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1207.692786][T19854] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1207.700739][T19854] R13: 00007ffdc9238750 R14: 00007f2e53863000 R15: 000055a5317034d8 [ 1207.708702][T19854] [ 1207.712356][T19854] Kernel Offset: disabled [ 1207.716664][T19854] Rebooting in 86400 seconds..